AgenTrustSearch marketplace

Marketplace catalog

All integrations

Browse descriptions and source links without JavaScript. Use your browser's Find command to locate a framework or technology.

57 listings, captured 2026-09-07 from this source revision. Search the live catalog for newer listings.

Community listings are manifest-validated, not endorsed. AGT project listings describe integrations in the Microsoft Agent Governance Toolkit. Listing does not establish certification, hardware validation, or commercial availability.

A2A AgentMesh

A2A protocol bridge for AgentMesh : trust-verified agent-to-agent communication via the A2A standard

AGT project · Microsoft · AGT

ADK AgentMesh

Deprecated. Previously published as adk-agentmesh. Install agent-governance-toolkit-integrations[adk] instead.

AGT project · Microsoft · AGT

Agent Passport System

Maps one Ed25519-signed Agent Passport System policy decision onto a TRACE Trust Record, refusing decisions that fail signature or expiry verification.

AgenTrust Community · aeoess · TRACE

Agent Sentinel

Runtime enforcement sidecar for agent fleets: detectors for delegation escalation, tool and identity drift, and policy avoidance, emitting Ed25519-signed TRACE Level 0 records.

AgenTrust Community · a1k7 · TRACE

Agentic SpendGuard

Spend firewall for LLM agents that reserves budget and gates tool calls before the provider is called, with a signed, hash-chained decision record.

AgenTrust Community · SpendGuard · TRACE

Audit Accountability Export

Example adapter from AgentMesh AuditEntry output to an external accountability export shape

AGT project · Microsoft · AGT

Azure Secure Key Release

Translates a WCM release policy into an Azure Managed HSM Secure Key Release policy, and maps verified MAA claims into WCM composite evidence.

AgenTrust Community · agentrust-io · WCM

cA2A Cross-Operator Delegation

Runnable 12-check tutorial for scoped delegation, local policy enforcement, sealed tasks, tamper detection, and offline provenance verification.

AgenTrust Community · agentrust-io · cA2A

Claude Code

Claude Code plugin that emits a signed Agent Manifest and TRACE record per session and detects agent composition drift from an approved baseline.

AgenTrust Community · agentrust-io · Agent Manifest, TRACE

Codex

Codex plugin that fingerprints agent configuration, detects workspace-scoped drift, and emits signed Agent Manifest and TRACE Level 0 records.

AgenTrust Community · agentrust-io · Agent Manifest, TRACE

comply54

Converts a comply54 ComplianceResult into a signed TRACE v0.1 JWT, mapping African regulatory policy decisions to verifiable attestation claims.

AgenTrust Community · comply54 · TRACE

Confidential Containers Trustee

Generates a Confidential Containers Trustee Rego resource policy and key resource layout from a WCM manifest, preferring the vTPM claim path.

AgenTrust Community · agentrust-io · WCM

Copilot Governance

Public Preview : GitHub Copilot Extension for agent governance code review: detects missing policy checks, unguarded tool calls, and audit logging gaps

AGT project · Microsoft · AGT

CrewAI AgentMesh

Deprecated. Previously published as crewai-agentmesh. Install agent-governance-toolkit-integrations[crewai] instead.

AGT project · Microsoft · AGT

DecisionAssure

Converts a DecisionAssure runtime governance trace into a TRACE v0.2 Trust Record, marked as third-party-asserted.

AgenTrust Community · DecisionAssure (a1k7) · TRACE

EPI Recorder

Seals a portable .epi evidence file and emits a TRACE v0.2 log-import Trust Record (Level 0) via epi export trace; .epi hash is the transcript.

AgenTrust Community · EPI Labs · TRACE, WCM

Flowise

Deprecated. Previously published as flowise-agentmesh. Install agent-governance-toolkit-integrations[flowise] instead.

AGT project · Microsoft · AGT

GCP Confidential Space

Generates a GCP Confidential Space workload identity attribute condition from a WCM manifest, comparing accepted measurements against the container image digest.

AgenTrust Community · agentrust-io · WCM

Google ADK

Emits a TRACE Trust Record from Google ADK callbacks using callback-visible tool and model identity without payloads.

AgenTrust Community · agentrust-io · TRACE

Haystack

Deprecated. Previously published as haystack-agentmesh. Install agent-governance-toolkit-integrations[haystack] instead.

AGT project · Microsoft · AGT

Hugging Face Download Gate

Refuses a Hugging Face model snapshot whose bytes do not hash to the weights_hash bound by a jointly-signed WCM manifest shipped in the repository.

AgenTrust Community · agentrust-io · WCM

LangChain

Emits a TRACE Trust Record from LangChain callbacks, including LangGraph tool runs, with tool identity but no payloads.

AgenTrust Community · agentrust-io · TRACE

LangChain AgentMesh Integration

Deprecated. Previously published as agentmesh-langchain. Install agent-governance-toolkit-integrations[langchain] instead.

AGT project · Microsoft · AGT

Langflow

Deprecated. Previously published as langflow-agentmesh. Install agent-governance-toolkit-integrations[langflow] instead.

AGT project · Microsoft · AGT

Langgraph Trust

Deprecated. Previously published as langgraph-agentmesh. Install agent-governance-toolkit-integrations[langgraph] instead.

AGT project · Microsoft · AGT

LlamaIndex

Emits a TRACE Trust Record from LlamaIndex instrumentation events, reading an allow-list so payloads cannot leak.

AgenTrust Community · agentrust-io · TRACE

LlamaIndex

Deprecated. Previously published as llamaindex-agentmesh. Install agent-governance-toolkit-integrations[llamaindex] instead.

AGT project · Microsoft · AGT

Mastra

Public Preview : Governance, trust verification, and audit middleware for Mastra AI agents

AGT project · Microsoft · AGT

MCP Receipt Governed

MCP tool-call receipt signing : Cedar policy decisions linked to governance receipts

AGT project · Microsoft · AGT

MCP Trust Proxy

MCP proxy that wraps any MCP tool with AgentMesh trust verification

AGT project · Microsoft · AGT

Nobulex

Emits Ed25519-signed JCS-canonical action receipts; each carries action_ref = SHA-256(JCS({agent_id, action_type, scope, timestamp_ms})) usable as TRACE external execution evidence (trace-spec #34).

AgenTrust Community · Nobulex · TRACE

NVIDIA GPU Attestation

Adapts NVIDIA nvattest evidence and appraisal into a WCM GpuReport, refusing unless every RIM, nonce and live certificate check passed.

AgenTrust Community · agentrust-io · WCM

OpenAI Agents AgentMesh

Deprecated. Previously published as openai-agents-agentmesh. Install agent-governance-toolkit-integrations[openai-agents] instead.

AGT project · Microsoft · AGT

OpenAI Agents SDK

Emits a first-party TRACE Trust Record from OpenAI Agents SDK tracing, carrying tool and handoff identity with no payloads.

AgenTrust Community · agentrust-io · TRACE

OpenAI Agents Trust

Deprecated. Previously published as agentmesh-openai-agents-trust. Install agent-governance-toolkit-integrations[openai-agents] instead.

AGT project · Microsoft · AGT

Openshell

Deprecated. Previously published as openshell-agentmesh. Install agent-governance-toolkit-integrations[openshell] instead.

AGT project · Microsoft · AGT

OpenShell TRACE Adapter

Builds a software-only TRACE record from NVIDIA OpenShell OCSF events and AGT ACS policy decisions.

AgenTrust Community · agentrust-io · TRACE

OpenTelemetry GenAI

Builds a TRACE Trust Record from OpenTelemetry GenAI spans, marked as an unsigned telemetry import.

AgenTrust Community · agentrust-io · TRACE

Pydantic AI Governance

Deprecated. Previously published as pydantic-ai-agentmesh. Install agent-governance-toolkit-integrations[pydantic-ai] instead.

AGT project · Microsoft · AGT

ramen-ai cMCP Adapter

TRACE v0.2 exporter that verifies V5 Ed25519 receipts produced by the ramen-ai cMCP adapter and emits a natively signed software-only Trust Record.

AgenTrust Community · ramen-ai · cMCP, TRACE

SAGE AgenTrust Bridge

Reverse proxy that edge-verifies a TRACE record (key-equal) or cMCP RuntimeClaim (gateway-asserted) before admitting a memory submit to a stock, unmodified SAGE consensus-memory node.

AgenTrust Community · SAGE AgenTrust Bridge · cMCP, TRACE

Scheduled Agents

Claude Code plugin that fingerprints scheduled-agent routine specs and auto-run hooks, warns when what runs without you watching drifts from an approved baseline, and emits a signed TRACE record.

AgenTrust Community · agentrust-io · TRACE

Shadow AI Discovery

Detects unregistered agents making MCP tool calls not declared in a cmcp catalog.json, emitting DiscoveryEvents that map to Agent Manifest records for remediation or quarantine.

AgenTrust Community · agentrust-io · cMCP, Agent Manifest

SOVP

Maps a SOVP attestation result onto an Ed25519-signed AgenTrust TRACE Trust Record, signing only the fields the caller supplies and inferring no claims.

AgenTrust Community · Litzki Systems · TRACE

Structural Authorization Gates

Deprecated. Previously published as structural-authz-agentmesh. Install agent-governance-toolkit-integrations[structural-authz] instead.

AGT project · Microsoft · AGT

Triton Repository Staging

Prepares a Triton model repository under WCM attestation, verifying decrypted bytes against the bound weights hash before Triton can load them.

AgenTrust Community · agentrust-io · WCM

vLLM Serving Guard

Gates vLLM weight loading on WCM attestation, binds serving to a live lease, and emits a signed hash-chained runtime record of the lease lifecycle.

AgenTrust Community · agentrust-io · WCM

WCM Agent Manifest Binding

Binds an Agent Manifest model_identity artifact to a WCM manifest's weights hash, and reports what a matching digest does and does not establish.

AgenTrust Community · agentrust-io · WCM, Agent Manifest

WCM CycloneDX ML-BOM

Exports a WCM manifest as a CycloneDX 1.6 machine-learning-model component so custody terms reach licence review and procurement tooling.

AgenTrust Community · agentrust-io · WCM

WCM in-toto Attestation

Wraps a signed WCM manifest as an in-toto Statement v1 so custody terms ride existing supply-chain tooling, and verifies the subject binding on the way back.

AgenTrust Community · agentrust-io · WCM

WCM Kyverno Policy Pack

Generates a Kyverno ClusterPolicy enforcing the deployment preconditions a WCM manifest implies, and states in the policy what admission cannot verify.

AgenTrust Community · agentrust-io · WCM

WCM OCI Referrer

Attaches a signed WCM manifest to a model artifact as an OCI v1.1 referrer, and grades how strongly the referrer binds to the actual weight bytes.

AgenTrust Community · agentrust-io · WCM

WCM OpenTelemetry

Emits WCM key release decisions and runtime custody state as OpenTelemetry spans and metrics under a documented wcm.* attribute set.

AgenTrust Community · agentrust-io · WCM

WCM to TRACE

Turns a WCM Layer 2 release decision and a signed Layer 3 runtime record chain into TRACE v0.2 Trust Records, deriving assurance from what actually verified.

AgenTrust Community · agentrust-io · WCM, TRACE