The control plane for AI agents
Rules, approvals, budgets and an audit trail for every model and tool call. Change one base URL; nothing to install.
Every decision here comes from Cartha's real rule engine. Type an action, switch a rule, approve a hold.
Works with anything that can set a base URL.
OpenAI · Anthropic · Gemini · Azure OpenAI · Bedrock · Vertex · Groq, Together or your own vLLM / Ollama
any SDK, LangChain, CrewAI, LlamaIndex, n8n, Make, Copilot Studio, MCP clients
Rules
Stop the action before it happens.
Write rules in plain language or as checks: who an agent may email, how much it may refund, which data may leave. Every model call and tool call is judged first; a refused call never reaches the provider or the tool. Try it: change the recipient.
Rule · Email only acme.in
Checking…
Approvals
A person decides the risky ones.
Refunds over a limit, payments, deletes: the call waits while an approver gets a Slack message with the exact action. One click approves that one call, once. Drag the amount and see where the rule starts holding it.
Rule · Refunds over ₹10,000 need approval
refunds-agent wants to issue a refund of ₹48,000
Checking…
Evidence
Every decision, on the record.
Each call gets a decision record: the rule, the reason and how long the check took, written before the response is released. Edit the message and see what Cartha masks and records.
Decision record · what Cartha returns
// checking…
One line to start.
Change your app's base URL to Cartha. Same models, same code; every call now governed.
The model name picks the provider. Chat, Responses, embeddings and Anthropic Messages share the same URL.
Built for teams that answer to risk.
Fails closed
If a call cannot be checked, it is not sent.
Your data stays yours
Isolated per organisation in the database; hosted in India, or in your own network.
SSO and SCIM
OIDC or SAML sign-in; people added and removed by your identity provider.
Your keys
Stored credentials encrypted, optionally under your own KMS key.
About 20 ms
Added at p95 per call in our benchmark.
Honest status
SOC 2 and a penetration test are planned, not done. We say so.