Crate agentguard_server

agentguard-server — AuthZEN HTTP PDP with an optional repository-defined gRPC mirror.

Embedders can mount the AuthZEN HTTP surface inside an existing axum app via build_router, or run it as a standalone service via run. The request-shape helpers (evaluation_request_to_agent, build_request_entities) and the MAX_BATCH_EVALUATIONS budget are re-exported for downstream consumers that want to keep request shaping aligned with the PDP’s expectations.

See docs/architecture.md for the standalone-versus-embedded configuration boundary and docs/production.md for the supported deployment contract.

Re-exports

pub use audit::AsyncAuditAppender;

pub use audit::AuditAppender;

pub use auth_layer::AuthLayer;

pub use authzen::build_request_entities;

pub use authzen::build_state;

pub use authzen::build_state_with_cache;

pub use authzen::build_state_with_options;

pub use authzen::evaluation_request_to_agent;

pub use authzen::AppState;

pub use authzen::AppStateOptions;

pub use authzen::MAX_BATCH_EVALUATIONS;

pub use listener::AuthConfig;

pub use listener::ServerConfig;

pub use server::build_router;

pub use server::run;

Modules

audit

Audit persistence port used by PDP request handling.

auth_layer

Authentication middleware for the AuthZEN HTTP server.

authzen

AuthZEN HTTP endpoint types and handlers.

grpc

gRPC AccessEvaluation service.

listener

Server configuration.

proto

Generated gRPC types. Created by build.rs from proto/agentguard.proto.

server

Server entry point: agentguard-server.