Le périmètre. Les preuves. Les limites.

{
  "mcpServers": {
    "xsom-ai-guard": {
      "command": "uv",
      "args": [
        "run",
        "--directory",
        "/path/to/xsom-ai-guard",
        "python",
        "-m",
        "gateway.server"
      ],
      "env": {
        "XSOM_TENANT_TOKEN": "<votre-jeton-de-passerelle>",
        "DATABASE_URL": "postgresql://<user>:<password>@<host>:5432/<db>?sslmode=require"
      }
    }
  }
}

import requests

XSOM_API = "https://api.votre-deploiement.example"
XSOM_KEY = "<votre-jeton-de-passerelle>"

def allowed(tool: str, arguments: dict) -> bool:
    r = requests.post(
        f"{XSOM_API}/v1/authorize",
        headers={"X-Gateway-Token": XSOM_KEY},
        json={"tool": tool, "arguments": arguments},
        timeout=30,
    )
    # "allow" -> run it | "hold" -> wait for human approval | "deny" -> blocked
    return r.json().get("decision") == "allow"

# Before your agent executes any tool:
if allowed("crm.delete_contact", {"id": 42}):
    crm.delete_contact(id=42)

# Zero-code monitoring — point the OpenAI SDK at xSOM.
# Your OpenAI key is still used and forwarded upstream (never stored).
# The gateway token is in the base_url, so no extra header is needed.
from openai import OpenAI

client = OpenAI(
    base_url="https://api.votre-deploiement.example/proxy/openai/<votre-jeton-de-passerelle>/v1",
    api_key="<your OpenAI key>",  # forwarded upstream, never stored by xSOM
)
# Use the client exactly as before — xSOM audits every tool-call it makes.