Introduction

Connect agents to your workspace, control tool calls with policies, and review risk and cost.

Kontext connects your team’s agents to one workspace. It checks each tool call against your policies before the call runs. The dashboard shows what happened and the activity’s risk and cost.

On each endpoint, the Kontext daemon receives tool calls from agent hooks. The daemon makes the policy decision locally and records the decision and outcome. The workspace receives those records and holds your team’s policies.

The endpoint daemon makes the decision. The workspace receives activity records and supplies policies.

What you find in the dashboard

Page	What it shows
Home	Your endpoints, the agents Kontext found on each one, and whether their hooks are installed.
Explore	Sessions and tool calls with the agent’s request, the policy decision, and the outcome.
Risk	Tool calls flagged for review, with a severity, a category, and an explanation.
Cost	API-equivalent cost of the model requests behind tool calls, by model, tool activity, and person.
Authorization → Policies	The Enforced and Observing lists and the available policy presets.
Authorization → History	Every saved change to your policies.

How policy works

Kontext evaluates policies on the endpoint inside the agent’s pre-tool hook. The agent waits for the decision. The workspace takes no part in that step. A new policy starts in the Observing list. You can see how many calls it would block before it blocks anything. When the matches look right, enforce the policy. In Enforce mode, a Deny stops the call before it runs.

Kontext also reports risk and cost for the same activity. Neither changes a decision. How decisions work explains the tool call sequence and failure behavior.

Two ways to deploy

• To set up one endpoint, open Get started and create a personal API key. Run brew install kontext-security/tap/kontext, then kontext setup. See the quickstart.
• To set up many endpoints, download the signed package and scripts from Deployments. Push them with your MDM. See deploying Kontext.

Where to go next

Core concepts

Learn how Kontext connects agents, tool calls, and policies to risk and cost.

Supported agents

See what Claude Code, Codex, and Claude Cowork report to Kontext.

Policies

Review what Block GitHub force pushes would block in the Observing list before you enforce it.

Management API

Use the API to read and change policies or manage API keys.