agent-governance-toolkit Agent工作流
AI Skill Hub 强烈推荐：agent-governance-toolkit Agent工作流 是一款优质的AI工具。已获得 1.6k 颗 GitHub Star，AI 综合评分 8.2 分，在同类工具中表现稳健。如果你正在寻找可靠的AI工具解决方案，这是一个值得深入了解的选择。
📚 深度解析
**为什么要使用开源工具而非商业 SaaS？**
对于个人开发者和有隐私需求的用户，本地部署的开源工具意味着数据不离本机，不受第三方服务商的数据政策约束。同时，开源工具通常没有使用次数限制和月度费用，一次安装即可长期使用，对于高频使用场景的总拥有成本（TCO）远低于订阅制商业工具。
**安装与环境准备**
agent-governance-toolkit Agent工作流 依赖 Python 运行环境。建议通过 pyenv（Python）或 nvm（Node.js）管理 Python 版本，避免全局环境污染。对于新手用户，推荐先创建虚拟环境（python -m venv venv && source venv/bin/activate），再安装依赖，这样即使出现问题也可以随时删除虚拟环境重新开始，不影响系统稳定性。
**社区与维护**
GitHub Issue 和 Discussion 是获取帮助的最快渠道。在提问前建议先检查 Closed Issues（已关闭的问题），大多数常见问题都已有解答。遇到 Bug 时，提供 pip list 的输出、完整错误堆栈和最小可复现示例，能显著提高开发者响应速度。AI Skill Hub 将持续追踪 agent-governance-toolkit Agent工作流 的版本更新，及时通知重要功能变化。
📋 工具概览
专为AI Agent设计的开源治理框架，提供策略执行、零信任身份认证和安全执行等核心功能。帮助开发者构建可信、合规的AI工作流系统，适合关注AI安全和治理的开发团队。
agent-governance-toolkit Agent工作流 是一款基于 Python 开发的开源工具，专注于 AI安全、智能体治理、策略执行 等核心功能。作为 GitHub 开源项目，它拥有活跃的社区支持和持续的版本迭代，代码完全透明可审计，支持本地部署以保护数据隐私。无论是个人使用还是集成到企业工作流，都能提供稳定可靠的解决方案。
📖 中文文档
专为AI Agent设计的开源治理框架，提供策略执行、零信任身份认证和安全执行等核心功能。帮助开发者构建可信、合规的AI工作流系统，适合关注AI安全和治理的开发团队。
agent-governance-toolkit Agent工作流 是一款基于 Python 开发的开源工具，专注于 AI安全、智能体治理、策略执行 等核心功能。作为 GitHub 开源项目，它拥有活跃的社区支持和持续的版本迭代，代码完全透明可审计，支持本地部署以保护数据隐私。无论是个人使用还是集成到企业工作流，都能提供稳定可靠的解决方案。
- 开源免费，支持本地部署，数据完全自主可控
- 活跃的 GitHub 开源社区，持续迭代更新
- 提供详细文档和使用示例，新手友好
- 支持自定义配置，灵活适配不同使用环境
- 可作为基础组件集成进现有技术栈或进行二次开发
- 本地部署运行，保护数据隐私，满足合规要求
- 自定义集成到现有系统，扩展技术栈能力
- 作为开源基础组件进行商业化二次开发
# 方式一：pip 安装（推荐）
pip install agent-governance-toolkit
# 方式二：虚拟环境安装（推荐生产环境）
python -m venv .venv
source .venv/bin/activate # Windows: .venv\Scripts\activate
pip install agent-governance-toolkit
# 方式三：从源码安装（获取最新功能）
git clone https://github.com/microsoft/agent-governance-toolkit
cd agent-governance-toolkit
pip install -e .
# 验证安装
python -c "import agent_governance_toolkit; print('安装成功')"
- 访问 GitHub 仓库页面
- 按照 README 文档完成依赖安装
- 根据系统环境完成初始化配置
- 参考官方示例或文档开始使用
- 遇到问题可在 GitHub Issues 中查找解答
# 命令行使用
agent-governance-toolkit --help
# 基本用法
agent-governance-toolkit input_file -o output_file
# Python 代码中调用
import agent_governance_toolkit
# 示例
result = agent_governance_toolkit.process("input")
print(result)
# agent-governance-toolkit 配置文件示例（config.yml） app: name: "agent-governance-toolkit" debug: false log_level: "INFO" # 运行时指定配置文件 agent-governance-toolkit --config config.yml # 或通过环境变量配置 export AGENT_GOVERNANCE_TOOLKIT_API_KEY="your-key" export AGENT_GOVERNANCE_TOOLKIT_OUTPUT_DIR="./output"
简介
🌍 English | Español | 日本語 | 简体中文 | 한국어 | 繁體中文
Additional Capabilities
| Capability | Description |
|---|---|
| **MCP Security Gateway** | Tool poisoning detection, drift monitoring, typosquatting, hidden instruction scanning ([Spec](docs/specs/MCP-SECURITY-GATEWAY-1.0.md)) |
| **Shadow AI Discovery** | Find unregistered agents across processes, configs, and repos ([Discovery](agent-governance-python/agent-discovery/)) |
| **Governance Dashboard** | Real-time fleet visibility for health, trust, and compliance ([Dashboard](examples/demos/governance-dashboard/)) |
| **PromptDefense Evaluator** | 12-vector prompt injection audit ([Evaluator](agent-governance-python/agent-compliance/src/agent_compliance/prompt_defense.py)) |
| **Contributor Reputation** | PR/issue author screening for social engineering. Reusable GitHub Action ([Action](.github/actions/contributor-check/)) |
---
Prerequisites
- Python: 3.10+
- Node.js: 18+ / npm 9+ (TypeScript SDK)
- .NET: 8+
- Go: 1.25+
- Rust: 1.70+
- Optional:
AZURE_CLIENT_ID,AZURE_TENANT_ID,AZURE_CLIENT_SECRETfor Azure-integrated features
---
Install
| Language | Package | Command |
|---|---|---|
| **Python** | [agent-governance-toolkit](https://pypi.org/project/agent-governance-toolkit/) | pip install "agent-governance-toolkit[full]" |
| **TypeScript** | [@microsoft/agent-governance-sdk](agent-governance-typescript/) | npm install @microsoft/agent-governance-sdk |
| **Copilot CLI** | [@microsoft/agent-governance-copilot-cli](agent-governance-copilot-cli/) | npx @microsoft/agent-governance-copilot-cli install |
| **Claude Code** | [@microsoft/agent-governance-claude-code](agent-governance-claude-code/) | claude --plugin-dir ./agent-governance-claude-code |
| **Codex CLI** | [@microsoft/agent-governance-codex-cli](agent-governance-codex-cli/) | node agent-governance-codex-cli/bin/agt-codex.mjs install |
| **OpenCode** | [@microsoft/agent-governance-opencode](agent-governance-opencode/) | npm install @microsoft/agent-governance-opencode |
| **.NET** | [Microsoft.AgentGovernance](https://www.nuget.org/packages/Microsoft.AgentGovernance) | dotnet add package Microsoft.AgentGovernance |
| **.NET MCP** | Microsoft.AgentGovernance.Extensions.ModelContextProtocol | dotnet add package Microsoft.AgentGovernance.Extensions.ModelContextProtocol |
| **Rust** | [agent-governance](https://crates.io/crates/agent-governance) | cargo add agent-governance |
| **Go** | [agent-governance-toolkit](agent-governance-golang/) | go get github.com/microsoft/agent-governance-toolkit/agent-governance-golang |
All five language SDKs implement core governance (policy, identity, trust, audit). Python has the full stack. Copilot CLI and Claude Code are first-party developer surfaces built on the TypeScript SDK. See Language Package Matrix for detailed per-language coverage.
<details> <summary><b>Python distributions (v4.1.0 — consolidated)</b></summary>
As of v4.1.0, 45 packages have been consolidated into 5 top-level distributions:
| Distribution | PyPI | What's included |
|---|---|---|
agent-governance-toolkit-core | [agent-governance-toolkit-core](https://pypi.org/project/agent-governance-toolkit-core/) | Policy engine, capability model, audit, MCP gateway, zero-trust identity, trust scoring, A2A/MCP/IATP bridges |
agent-governance-toolkit-runtime | [agent-governance-toolkit-runtime](https://pypi.org/project/agent-governance-toolkit-runtime/) | Privilege rings, saga orchestration, termination control, execution plan validation, command denylist enforcement |
agent-governance-toolkit-sre | [agent-governance-toolkit-sre](https://pypi.org/project/agent-governance-toolkit-sre/) | SLOs, error budgets, chaos engineering, circuit breakers |
agent-governance-toolkit-cli | [agent-governance-toolkit-cli](https://pypi.org/project/agent-governance-toolkit-cli/) | agt CLI, OWASP verification, integrity checks, policy linting |
agent-governance-toolkit[full] | [agent-governance-toolkit](https://pypi.org/project/agent-governance-toolkit/) | Meta-package installing all of the above |
Previous package names (agent-os-kernel, agentmesh-platform, agentmesh-runtime, agent-sre, agent-discovery, agent-hypervisor, agentmesh-marketplace, agentmesh-lightning) remain installable as stub packages that redirect to the consolidated distributions.
</details>
Quick Start
Prerequisites: Python 3.11+
pip install "agent-governance-toolkit[full]"Use the [full] extra for the quick-start imports below. The base agent-governance-toolkit wheel installs the compliance CLI only; the governance modules live in the consolidated core distribution. The agentmesh quick-start import remains the current wrapper API. Importing agent_os emits a DeprecationWarning because the old agent-os-kernel distribution is deprecated. Use agent-governance-toolkit-core (or the [full] extra that includes it) as the replacement distribution. Policy-engine host code uses the ACS SDK; agt-policies provides the one-way v4-to-v5 migration command. The pre-ACS agent_os.policies rule model is gone, and BREAKING_CHANGES.md lists its replacements.
The policy engine is published upstream as agent-control-spec. agent-hooks defines its interception contract. AGT retains the AgentControl host APIs and framework adapters in policy-engine/, not a second decision engine. This keeps policy evaluation in one place. AGT can adopt upstream fixes through a dependency update while keeping its host APIs and framework integrations. See the ACS package guide for the distinction between upstream packages and AGT's compatibility SDKs.
For Claude Code, add AGT as a plugin marketplace and install the governance plugin:
/plugin marketplace add microsoft/agent-governance-toolkit
/plugin install agt-governance@agent-governance-toolkitGovern any tool function in two lines:
from agentmesh.governance import govern
safe_tool = govern(my_tool, policy="policy.yaml") # every call checked, logged, enforcedOn every call, safe_tool evaluates the YAML policy, logs the decision to an audit trail, and raises GovernanceDenied when the policy blocks the action.
```yaml
Examples
| Example | Framework | What it demonstrates |
|---|---|---|
| [acs-email-tool](examples/acs-email-tool) | Framework-neutral ACS host | Snapshot, verdict, transform, deny, and host enforcement |
| [acs-atr-annotator](examples/acs-atr-annotator) | ACS custom policy | Independent threat-rule annotations with fail-closed decisions |
| [openai-agents-governed](examples/openai-agents-governed) | OpenAI Agents SDK | Policy-gated tool calls with trust tiers |
| [crewai-governed](examples/crewai-governed) | CrewAI | Multi-agent governance with role-based policies |
| [smolagents-governed](examples/smolagents-governed) | HuggingFace smolagents | Lightweight agent governance |
| [maf-integration](examples/maf-integration) | MAF | Microsoft Agent Framework integration |
| [mcp-trust-verified-server](examples/mcp-trust-verified-server) | MCP | Trust-verified MCP server implementation |
| [governance-dashboard](examples/demos/governance-dashboard) | Streamlit | Real-time fleet visibility dashboard |
| [k8s-agent-sandbox-governed](examples/k8s-agent-sandbox-governed) | kubernetes-sigs/agent-sandbox | Pre-dispatch command policy on top of Kubernetes-native execution isolation |
---
Packages
| Package | Description |
|---|---|
| [**Agent OS**](agent-governance-python/agent-os/) | Policy engine, agent lifecycle, governance gate |
| [**Agent Control Specification**](policy-engine/) ([README](policy-engine/README.md)) | Stateless, deterministic, fail-closed policy decision runtime (Rust core) backing the AGT policy layer |
| [**Agent Mesh**](agent-governance-python/agent-mesh/) | Agent discovery, routing, and trust mesh |
| [**Agent Runtime**](agent-governance-python/agent-runtime/) | Execution sandboxing with four privilege rings |
| [**Agent SRE**](agent-governance-python/agent-sre/) | Kill switch, SLO monitoring, chaos testing |
| [**Agent Compliance**](agent-governance-python/agent-compliance/) | OWASP verification, policy linting, integrity checks |
| [**Agent Marketplace**](agent-governance-python/agent-marketplace/) | Plugin governance and trust scoring |
| [**Agent Lightning**](agent-governance-python/agent-lightning/) | RL training governance with violation penalties |
| [**Agent Hypervisor**](agent-governance-python/agent-hypervisor/) | Execution audit, delta engine, in-memory commitment tracking, command denylist enforcement |
aiskill88点评：该项目填补AI Agent治理领域空白，架构完整，生态活跃，是构建可信AI系统的优选方案，适合企业级应用。
- 需要让 Claude / Cursor 操作本地工具的 AI 工程师
- 构建多智能体协作系统的 Agent 开发者
- 跨境业务、多语言内容运营团队
- 做语音类 AI 产品的开发者
- 配置 MCP 服务器时建议使用 stdio 传输 + JSON-RPC，避免暴露公网
- 生产部署优先使用 Docker Compose 隔离依赖，并挂载 volume 持久化数据
- Agent 任务先做 dry-run 验证工具调用链，再开启自主执行
- API key 直接提交到 git 仓库（请用 .env 并加入 .gitignore）
- MCP 配置路径拼错或权限不足，重启 Claude Desktop 才生效
- 容器内无法访问宿主机 localhost — 使用 host.docker.internal
- Python 依赖冲突：建议用 venv / uv 隔离环境
- Docker：agent-governance-toolkit 提供官方镜像，docker compose up 一键启动
- CLI：直接 npm install -g / pip install，命令行调用
- 云端托管：可放在 Vercel / Railway / Fly.io 等 PaaS 平台
⚡ 核心功能
- 开源免费，支持本地部署，数据完全自主可控
- 活跃的 GitHub 开源社区，持续迭代更新
- 提供详细文档和使用示例，新手友好
- 支持自定义配置，灵活适配不同使用环境
- 可作为基础组件集成进现有技术栈或进行二次开发
- 需要让 Claude / Cursor 操作本地工具的 AI 工程师
- 构建多智能体协作系统的 Agent 开发者
- 跨境业务、多语言内容运营团队
- 做语音类 AI 产品的开发者
- 配置 MCP 服务器时建议使用 stdio 传输 + JSON-RPC，避免暴露公网
- 生产部署优先使用 Docker Compose 隔离依赖，并挂载 volume 持久化数据
- Agent 任务先做 dry-run 验证工具调用链，再开启自主执行
- API key 直接提交到 git 仓库（请用 .env 并加入 .gitignore）
- MCP 配置路径拼错或权限不足，重启 Claude Desktop 才生效
- 容器内无法访问宿主机 localhost — 使用 host.docker.internal
- Python 依赖冲突：建议用 venv / uv 隔离环境
👥 适合人群
🎯 使用场景
- 本地部署运行，保护数据隐私，满足合规要求
- 自定义集成到现有系统，扩展技术栈能力
- 作为开源基础组件进行商业化二次开发
⚖️ 优点与不足
- +MIT 协议，可免费商用
- +完全开源免费，无授权费用
- +本地部署，数据完全自主可控
- +开发者社区支持，遇问题可查可问
- −安装和初始配置可能需要一定技术基础
- −功能完整性通常不如成熟商业产品
- −技术支持主要依赖开源社区，响应速度不稳定
AI Skill Hub 为第三方内容聚合平台，本页面信息基于公开数据整理，不对工具功能和质量作任何法律背书。
建议在沙箱或测试环境中充分验证后，再部署至生产环境，并做好必要的安全评估。
✅ MIT 协议 — 最宽松的开源协议之一，可自由商用、修改、分发，仅需保留版权声明。
🔗 相关工具推荐
❓ 常见问题 FAQ
总体来看，agent-governance-toolkit Agent工作流 是一款质量优秀的AI工具，在同类工具中具备一定竞争力。AI Skill Hub 将持续追踪其更新动态，建议收藏备用，结合自身场景选择合适时机引入使用。
| 原始名称 | agent-governance-toolkit |
| 原始描述 | 开源AI工作流：AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution。⭐1.6k · Python |
| Topics | AI安全智能体治理策略执行零信任架构合规管理 |
| GitHub | https://github.com/microsoft/agent-governance-toolkit |
| License | MIT |
| 语言 | Python |
收录时间：2026-05-17 · 更新时间：2026-05-19 · License：MIT · AI Skill Hub 不对第三方内容的准确性作法律背书。