tenuo
AI developer platformsTenuo is a task-level authorization system for AI agents that uses cryptographic credentials (warrants) to constrain the tools, parameters, and validity periods an agent can invoke, prevents privileges from being escalated during delegation, and generates signed allow/deny evidence. It adopts a capability-based authorization model, where credentials travel with the task and can only be narrowed, never expanded, and performs local verification at the tool execution boundary without network lookups, making it resistant to prompt injection. It supports Python, TypeScript, and Rust SDKs, can be deployed in-process, as a sidecar, or at a gateway, and works with existing identity and policy systems. The core self-hosted portion is licensed under Apache-2.0, and a separate Tenuo Cloud hosted control plane is in public beta.