GraphCanon updated 2w · GitHub synced 2w
Decision brief
Cordum provides governance over AI agents with policy enforcement and audit trails that work with popular frameworks like LangChain and MCP.
Good fit when
- When you need comprehensive audit trails for autonomous AI agents
- For implementing pre-execution policies in your LangChain or MCP projects
Avoid when
- If you require a solution hosted as an external service, not self-hosted
- In environments where you do not want to enforce policies via approval gates
Observed Jul 17, 2026 · Source: enrich:decision_facts
Verify the decision
Maintenance and security
Full trust report- Maintenance
- Very active (1d since push)
- As of 2w
- Provenance
- Not a fork · Organization account
- As of 2w
- Security (OSV)
- 27 low (27 low)
- As of 1mo
Public GitHub metadata and optional OSV scans. Signals, not a guarantee. Trust methodology.
Install
go get github.com/cordum-io/cordumSimilar tools
Same-category neighbours. No typed graph edges are catalogued for this tool yet.
Evidence and technical details
Sourced facts, taxonomy, compatibility claims, README excerpt, and machine-readable endpoints.
Overview
Cordum is an open agent control plane that facilitates governance over AI agents through pre-execution policies, approval gates, and comprehensive auditing, supporting frameworks like LangChain, CrewAI, and MCP.
Capability facts
- Deploy
- Self-host
Source: dockerfile:Dockerfile · Aug 2, 2026
- Docker
- Dockerfile present
Source: dockerfile:Dockerfile · Aug 2, 2026
- MCP server
- No MCP server detected
Source: repo_scan · Aug 2, 2026
- Languages
- go, javascript
Source: github.language+package.json · Aug 2, 2026
Categories
Tags
README
Option A: Install from source
One command stands up the full stack — API gateway, scheduler, safety kernel, workflow engine, context engine, dashboard, NATS, and TLS-secured Redis — with auto-generated secrets, auto-provisioned certificates, and a post-deploy smoke test that exercises a real approval workflow:
git clone https://github.com/cordum-io/cordum.git
cd cordum
./tools/scripts/quickstart.sh
Prerequisites: Docker Desktop v4+ (or Engine v20.10+ with Compose v2,
≥ 4 GB RAM allocated), Go 1.26.3+ (for first-run cert generation), and
curl. On Windows use MSYS2 / Git Bash / WSL.
What you get at the end:
- Dashboard at http://localhost:8082 — log in as
admin/ChangeMe123!(the default dev password, also saved to.envasCORDUM_ADMIN_PASSWORD; change it before exposing the stack). - Gateway at http://localhost:8081 with a generated
CORDUM_API_KEYin.env. - TLS CA, server, and client keypairs under
./certs/. - A working approval-gate workflow proven by the built-in
platform_smoke.shrun.
Full walkthrough, platform notes, and troubleshooting: docs/quickstart.md.
License
Licensed under Business Source License 1.1 (BUSL-1.1).
- Self-host and use internally: Permitted
- Modify and contribute back: Permitted
- Offer as a competing hosted service: Not permitted
- Change Date: January 1, 2029 — automatically converts to Apache License 2.0
See LICENSE for full terms.
For agents
This page has a .md twin and JSON over the API.