Kagenti is a cloud-native middleware providing a framework-neutral, scalable, and secure platform for deploying and orchestrating AI agents through standardized agent communication protocols (A2A, MCP).
| Included Services: | |
|---|---|
| - Zero-Trust Security Architecture - Authentication and Authorization - Trusted workload identity (SPIRE) - Deployment and Configuration - Scaling and Fault-tolerance - Discovery of agents and tools - State Persistence |  |
Despite the extensive variety of frameworks available for developing agent-based applications (LangGraph, CrewAI, AG2, etc.), there is a distinct lack of standardized methods for deploying and operating agent code in production environments. Agents are adept at reasoning, planning, and interacting with tools, but their full potential is often limited by:
- Deployment Complexity - Each framework requires custom deployment scripts and infrastructure
- Security Gaps - No standardized approach to authentication, authorization, and workload identity
- Protocol Fragmentation - Agents and tools use different communication patterns
- Operational Overhead - Scaling, monitoring, and lifecycle management require custom solutions
Kagenti addresses these challenges by enhancing existing agent frameworks with production-ready, framework-neutral infrastructure.
The goal of Kagenti is to provide a pluggable agentic platform blueprint. Key functionalities are currently organized into four key pillars:
- Lifecycle Orchestration
- Networking
- Security
- Observability
Under each of these pillars are logical components that support the workload runtime.
┌─────────────────────────────────────────────────────────────────────────────────────┐
│ KAGENTI PLATFORM │
├─────────────────────────────────────────────────────────────────────────────────────┤
│ │
│ ┌───────────────────────────────────────────────────────────────────────────────┐ │
│ │ KAGENTI UI* │ │
│ │ (Dashboard: Deploy, Test, Monitor Agents & Tools + Backend API) │ │
│ └───────────────────────────────────────────────────────────────────────────────┘ │
│ │ │
│ ▼ │
│ ┌───────────────────────────────────────────────────────────────────────────────┐ │
│ │ WORKLOAD RUNTIME │ │
│ │ ┌─────────────────────────────┐ ┌─────────────────────────────┐ │ │
│ │ │ AGENTS │ │ TOOLS │ │ │
│ │ │ (A2A - LangGraph, CrewAI │ │ (MCP Protocol Servers) │ │ │
│ │ │ Marvin, Autogen, etc.) │ │ │ │ │
│ │ └─────────────────────────────┘ └─────────────────────────────┘ │ │
│ └───────────────────────────────────────────────────────────────────────────────┘ │
│ │ │
├────────────────────────────────────────┼────────────────────────────────────────────┤
│ PLATFORM PILLARS │
│ │ │
│ ┌──────────────────┐ ┌──────────────────┐ ┌──────────────────┐ ┌────────────────┐ │
│ │ LIFECYCLE │ │ NETWORKING │ │ SECURITY │ │ OBSERVABILITY │ │
│ │ ORCHESTRATION │ │ │ │ │ │ │ │
│ ├──────────────────┤ ├──────────────────┤ ├──────────────────┤ ├────────────────┤ │
│ │ │ │ │ │ │ │ │ │
│ │ Agents/Tools │ │ Tool Routing │ │ Identity & Auth │ │ Tracing │ │
│ │ Lifecycle & │ │ & Policy │ │ (AuthBridge*) │ │(MLflow,Langflow│ │
│ │ Discovery │ │ (MCP Gateway) │ │ │ │ Phoenix) │ │
│ │ (k8s workloads, │ │ │ │ │ │ │ │
│ │ labels, │ ├──────────────────┤ ├──────────────────┤ ├────────────────┤ │
│ │ AgentCard CRD*) │ │ │ │ │ │ │ │
│ │ │ │ Service Mesh │ │ OAuth/OIDC │ │ Network │ │
│ │ │ │ (Istio/Ambient) │ │ (Keycloak) │ │ Visualization │ │
│ │ │ │ │ │ │ │ (Kiali) │ │
│ │ Container │ ├──────────────────┤ ├──────────────────┤ │ │ │
│ │ Builds │ │ │ │ │ │ │ │
│ │ (Shipwright) │ │ Ingress/Routing │ │ Workload Identity│ │ │ │
│ │ │ │ (Gateway API) │ │ (SPIFFE/SPIRE) │ │ │ │
│ │ │ │ │ │ │ │ │ │
│ └──────────────────┘ └──────────────────┘ └──────────────────┘ └────────────────┘ │
│ │
├─────────────────────────────────────────────────────────────────────────────────────┤
│ KUBERNETES / OPENSHIFT │
└─────────────────────────────────────────────────────────────────────────────────────┘
* = Built by Kagenti
Kagenti provides a set of components and assets that make it easier to manage AI agents and tools and integrate their fine-grained authorization into modern cloud-native environments.
| Component | Description |
|---|---|
| Kagenti UI | Dashboard for deploying agents/tools as Kubernetes Deployments, interactive testing, and monitoring |
| Identity & Auth Bridge | Identity pattern assets that capture common authorization scenarios and provide reusable building blocks for implementing consistent authorization across services |
| Agent Lifecycle Operator | Kubernetes admission webhook for building agents from source, managing lifecycle, and coordinating platform services |
| MCP Gateway | Unified gateway for Model Context Protocol (MCP) servers and tools. It acts as the entry point for policy enforcement, handling requests and routing them through the appropriate authorization patterns |
| Plugins adapter | Adapter for security and safety plugins for Envoy-based gateways |
- Python ≥3.9 with uv installed
- Docker Desktop, Rancher Desktop, or Podman (16GB RAM, 4 cores recommended)
- Kind, kubectl, Helm
- Ollama for local LLM inference
# Clone the repository
git clone https://github.com/kagenti/kagenti.git
cd kagenti
# Copy and configure secrets
cp deployments/envs/secret_values.yaml.example deployments/envs/.secret_values.yaml
# Edit deployments/envs/.secret_values.yaml with your values# Run the Ansible-based installer
deployments/ansible/run-install.sh --env devUse deployments/ansible/run-install.sh --help for options. For more detailed installation instructions including OpenShift refer to Installation Guide.
# Show service URLs and credentials
.github/scripts/local-setup/show-services.sh
open http://kagenti-ui.localtest.me:8080
# Login with credentials from show-services.sh output (default: admin / admin)From the UI you can:
- Import and deploy A2A agents from any framework
- Deploy MCP tools directly from source
- Test agents interactively
- Monitor traces and network traffic
| Topic | Link |
|---|---|
| Installation | Installation Guide (Kind & OpenShift) |
| Components | Component Details |
| Demos & Tutorials | Demo Documentation |
| Import Your Own Agent | New Agent Guide |
| Import Your Own Tool | New Tool Guide |
| Architecture Details | Technical Details |
| Identity, Security, and Auth Bridge | Identity and Auth Bridge |
| Developer Guide | Contributing |
| Troubleshooting | Troubleshooting Guide |
| Blog Posts | Kagenti Blog |
- A2A (Agent-to-Agent) — Standard protocol for agent communication
- MCP (Model Context Protocol) — Protocol for tool/server integration
We welcome contributions! See CONTRIBUTING.md for guidelines.
To reach the maintainer team, email kagenti-maintainers@googlegroups.com or join us on Discord.
This QR Code links to http://kagenti.io
