LicoMesh

Governed connections for private agent deployments.

An open-source gateway that brings upstream services, MCP clients, operations, and workspaces onto one explicit control path.

Product

One server-side boundary for agent access.

LicoMesh runs in infrastructure you control. Operators configure services and capabilities locally, then expose them to authorized users and agent clients through HTTP, RPC, MCP, and the console.

Upstream gateway
Declare external HTTP and MCP services once, then expose them as governed operation entry points.
Downstream MCP
Offer grant-controlled discovery and execution to agent clients without handing out raw service credentials.
Operation Permission
Keep catalog, grants, policy, approval, execution, and audit on the same path for every action.
Private by default
Core state stays in the local server data directory. External middleware is an explicit deployment choice.

Path

Discovery to audit, without a hidden shortcut.

Every governed action follows the same sequence so ownership and policy remain visible.

  1. 01

    Discover

    Clients see only the operations their grants allow.

  2. 02

    Authorize

    Authentication, Operation Permission, tags, and risk policy are evaluated together.

  3. 03

    Execute

    Approved work runs through the server boundary with traffic controls when configured.

  4. 04

    Audit

    Changes leave redacted, queryable evidence for private deployments.

Principles

Open, connected, and still bounded.

Plural systems stay distinct. The mesh is the governed join, not a place where ownership disappears.

Source is available now. Production release is separate.

LicoMesh is open source and currently pre-release. Inspect the repository, then decide when a tagged release fits your deployment bar.

Open the repository