Discovery & inventory
Automatically discover and catalog every agent, session, MCP server, skill and model running across your infrastructure — multi-host and multi-cloud, with no proxy to babysit.
Product
Olivares AI brings every part of your enterprise AI under one roof — the models and agents, the MCP servers and identities behind them, the data they touch and the budgets they spend. See what each can reach, decide what it can do, and prove it — multi-provider by design, on your own infrastructure.
The access map · the differentiator
The source supplies a read/write mode where it can classify an observation. Unclassified modes remain unknown.
The map compares supplied grants with observations. Missing identity links or modes can leave comparisons pending; bounded results can be truncated.
Attribution depends on received identity signals: Firm, Approximate, Unknown. Origins that cannot be resolved do not appear.
The product tour
Every surface, with real console screenshots and an honest account of what is live today.
Read/write access and least-privilege drift — the differentiator.
Author managed policy, version it, deny-closed at the hook.
Catalog every tool; declared annotations, never trusted as truth.
A dedicated identity per agent, federated to your IdP.
See, attribute and govern model spend.
Control status and sealed evidence — not a certification.
Where agent quality gets measured and gated.
One-click estate stop, dual-control recovery.
One self-hosted product
Olivares AI is a single self-hosted product. The access map is the spine; around it sit the capabilities a platform, security or FinOps team needs to run an AI estate — the full scope the complete product targets, grouped here by what they help you do.
See your whole AI estate.
Automatically discover and catalog every agent, session, MCP server, skill and model running across your infrastructure — multi-host and multi-cloud, with no proxy to babysit.
Inspect observed session actions, models, tokens, costs, and event history, with governed work items and handoffs. Goals depend on the reporting source; computed task progress and the complete operating workflow are not yet verified.
Track the health, uptime and SLAs of your agents and MCP servers, with alerts on outages or degradation and a live dependency map.
Govern who — and what — is allowed to act.
Granular control over who and what can act — role- and attribute-based access, per-agent identity, human-in-the-loop approvals and a policy engine — with every action traceable to a person.
View observed agent relationships and use bounded workflows for work, runtime, messages, and handoffs. Coverage gaps remain explicit; the combined coordination and acknowledgment workflow is not yet verified end to end. Orchestration and A2A delegation are Business (Identity & Scale).
The work plane →Curate and reuse approved agents, MCPs and skills as versioned company templates, with governed self-service.
Secure and auditable by design.
Tamper-evident audit, secrets and egress controls, and guardrails against prompt injection, jailbreaks and data leaks — with reconstructable incident forensics.
Probe your agents safely — adversarial prompt-injection, jailbreak and exfiltration tests, scored against the OWASP agentic-risk checklist. Red team is Business.
Run operator-authored mock scenarios and ordered replay when a history source is available. Operating-system isolation requires a configured isolation backend and separate attestation; mock execution does not provide it.
Govern the whole stack, control the spend.
Resolve routing policies and ordered fallback candidates. The measured execution path requires a configured Claude Messages-compatible client; this does not verify every provider, local model, or console execution path.
Track AI spend by team, agent, model and project, set budgets and alerts, and forecast — with routing and caching policy to manage spend. Spend shown per session is Community; budgets and spend analysis across teams and projects are Business.
Answer the question that matters — is my agent still doing the right thing? — with evals, regression testing, output-quality monitoring and drift detection.
Govern what your agents know.
Govern what your agents know and retrieve — knowledge bases and RAG, governed retrieval, data lineage and residency, versioned prompts and persistent memory.
Open the enterprise door.
Map your AI program to the frameworks enterprises ask about — the EU AI Act, NIST AI RMF, ISO 42001, SOC 2 / ISO 27001 and GDPR — with exportable audit evidence and agent risk classification. It helps you demonstrate controls; it does not grant a certification. Framework catalogs and OSCAL export are Business (Compliance Packs).
Operate the platform itself.
Govern your agents’ tools — a catalog of MCP servers, skills and plugins, what is connected to whom, configuration, versioning and health.
Govern the agent and MCP lifecycle — provision, update and retire — and wire them into your real network, servers and data stores, with versioning, rollback and GitOps. Direct actuation is governed and deny-closed: live for a subset today, provisioned on-demand for the rest.
Olivares talks to the tools you already run — chat, on-call, your SIEM, ITSM systems, developer portals, webhooks and email. SIEM and ITSM push connectors are Business.
Manage Olivares itself as code — a full API, a Terraform provider, a declarative CLI and event webhooks. The Terraform provider is Business.
Organization hierarchy and delegated administration for service providers and large enterprises, with real tenant isolation and per-org usage. Delegated administration is Business (Identity & Scale); several organizations on one deployment are Enterprise.
High-level views for leadership — KPIs across cost, usage, risk and compliance, with scheduled, exportable reports. Risk and compliance views and reports are Business.
Manage conversational and realtime voice agents — sessions, state, transcription, latency and governance.
On the roadmap · post-v1
Managing an organization’s own trained or hosted models — a private model registry and fine-tuning workflows — is planned for after the first release. We are not presenting it as available today.
Editions
The open AGPL-3.0 build is the complete governance platform, free for unlimited users. Business and Enterprise add what an organization needs around it.
The complete product under AGPL-3.0, self-hosted, with unlimited users.
View the repositoryBusiness includes the commercial license, signed release channel and four capability families: Regulated Operations, AI Runtime Security, Compliance Packs, Identity & Scale. Nothing is sold separately. One legal entity; 1 active instance at a time; up to 5 active identity providers.
See pricingAn annual order form with negotiated terms: several legal entities, LTS and OTA mirror, OEM and redistribution rights. Air-gapped installation and offline update bundles.
Why EnterpriseRun Olivares AI on your infrastructure and connect a supported source.