AI agent operations · MCP gateway versus action control
A gateway connects the tool. Action control decides whether this call runs.
An MCP gateway gives an agent a path to tools. Deixic checks the agent, target, cost, and policy when the agent requests a consequential call.
The gateway boundary
A gateway registers tools, carries authentication, and routes calls to a connected system. Those controls establish which tools are available.
- Object
- Tool connection
- Decision time
- Registration and request routing
- Result
- A callable tool path
The action-control boundary
Deixic evaluates the requested action before execution. Policy allows it, denies it, or holds it for a named approver.
- Object
- One requested tool call
- Decision time
- Immediately before execution
- Result
- Allowed, denied, or awaiting approval
Use both boundaries
Keep tool registration and credentials at the gateway. Put production changes, exports, payments, deployments, and external sends under action policy.
See production workflowsSee the execution path