| Agent |
The identity a client uses to make governed calls. Has an access key, Connections, Policies and controls. |
| Aethis MCP server URL |
The Agent’s one MCP endpoint, https://mcp.aethis.io/v1/agents/{agent_id}/mcp, which your agent calls instead of the upstream server. All the Agent’s Connections resolve behind it. Not a secret. |
| Client |
How an Agent connects: MCP-compatible agent (no SDK required) or Custom HTTP (OpenAI chat completions through the model gateway). |
| Aethis access key |
The Agent’s scoped credential, sent as Authorization: Bearer <aethis_agent_token>. Shown once; afterwards only the Agent key fingerprint is shown. |
| Connection |
An upstream destination: an MCP Connection (remote MCP server) or a Model Route (OpenAI). |
| Model Route |
A route for direct model requests through the Aethis Model Gateway. OpenAI only. |
| Execution boundary |
A Connection’s shared state: Governed (calls can run) or Frozen (paused for review). |
| Capability |
A tool, resource or prompt that an MCP server offers. |
| Capability fingerprint |
Identifies one exact tool definition, so changes can be detected. |
| Action fingerprint |
Identifies one exact action: Agent, Connection, tool, resource and arguments. Approvals bind to it. |
| Governed action |
One agent action that Aethis evaluated and recorded. The unit of your plan allowance. |
| Policy |
A named, versioned set of rules. |
| Decision |
Allow, Require Approval or Block. |
| Matched rule / Matched control |
The rule that produced the decision. |
| Approve Once |
Issues a single-use approval for one exact action. Doesn’t execute it. |
| Deny |
Refuses the request. Confirmed with Deny Request. |
| Action Record |
The tamper-evident evidence for one governed action. |
| Execution Trace |
The step-by-step path of one action in Activity (View Execution Trace). |
| Enforcement mode |
A per-Agent setting: Observe or Enforce. New Agents default to Observe. |
| Observe Mode |
Aethis evaluates policy and records the decision, without blocking, holding or modifying execution. |
| Spend budget |
A limit on spend in money, tracked for an Agent and aggregated at the workspace. |
| Monthly spend cap |
The monthly amount shown for an Agent or workspace. The workspace cap is the documented enforced monetary boundary. |
| Spend this month |
Spend attributed to an Agent in the current month. |
| Alert at |
A percentage of an Agent’s spend cap. A warning threshold; it does not stop execution. |
| Tamper-evident evidence |
The Agent control that records a hash-chained decision and policy snapshot. |
| Chain hash |
An Action Record’s HMAC chain value, linking it to the previous record. |
| Basic controls |
Agent-level controls: redaction, unknown tool approval and tamper-evident evidence. |
| Refresh tools |
Runs tool discovery on a Connection. |
| Accept catalogue / Reject changes |
The decision on a Connection’s pending tool changes. |
| Capability Drift |
The alert type raised when a tool definition changes. |