Integrations

Add Control Zero to the providers, frameworks, and tools you already use. On supported events in Claude Code, Gemini CLI, Cursor IDE, and Kiro CLI, enforcement is deterministic: a deny stops the tool call before it executes. Python SDK hooks on Claude Code and Gemini CLI can instead mask a secret in place and let the call continue.

Control Zero fails closed by default when it cannot establish coverage, verifies signed policy bundles for tampering, and records an audit trail that distinguishes “did not run” from “ran and found nothing.” Coverage is declared per event rather than per host, so an integration never implies protection on a surface that does not provide it. The capability matrix is derived from the adapters' own capability declarations; run controlzero coverage --json to export them for your installation (a bare controlzero coverage prints only a short per-host summary).

Browse by where you are in the stack: model → framework → gateway → coding agent → MCP → observability.

Model providers

Direct APIs

OpenAIWrap the OpenAI client. Chat, tools, and embeddings stay governed.Anthropic ClaudeWrap the Anthropic client. Messages and tool use are policy-checked.Google GeminiGovern Gemini generateContent and function calling.CohereWrap Cohere chat and tool calls with dashboard policies.MistralGovern Mistral chat completions and tool use.DeepSeekAdd governance to DeepSeek API calls.

Local & self-hosted

OllamaGovern local and self-hosted models through Ollama.

Agent frameworks

LangChainCallback handler for chains, agents, and tool invocations.LangGraphPolicy checks for LangGraph nodes and tool edges.CrewAIGovern CrewAI agent tools and multi-agent runs.AutoGenEnforce policies on AutoGen agent conversations and tools.OpenAI Agents SDKGovern OpenAI Agents SDK tool calls and handoffs.PydanticAIWrap PydanticAI agents so tools stay inside policy.Google ADKEnforce policies in Google Agent Development Kit agents.Vercel AI SDKMiddleware for Vercel AI SDK model and tool calls.

Gateways & routers

OpenRouterOne integration across models routed through OpenRouter.LiteLLMGovern traffic through the LiteLLM proxy or SDK.

Coding agents

Kiro (AWS)Kiro CLI is GA: deny rules block direct tool calls before execution. Denying the sub-agent spawn itself needs Python SDK 1.13.12 or later -- on any earlier SDK the use_subagent matcher is never installed, so such a rule silently never fires; check controlzero --version before relying on it. Every evaluated event is audited. A sub-agent’s own tool calls are gated only when it runs an agent config carrying our hooks.

MCP

MCP clientsWrap MCP calls with the SDK to block denials before execution, or expose cooperative checks to compatible clients.MCP GuardExpose cooperative DLP guard checks as MCP tools.

Observability partners

LangfusePair Control Zero enforcement with Langfuse tracing.BraintrustUse Control Zero for policy; Braintrust for evaluation.