systemprompt-gateway v0.30.1
The self-owned AI control plane. systemprompt is a single self-hosted
binary that puts every AI interaction in your organisation behind
governance you can prove: authenticated, authorized, rate-limited,
audited, and costed, with the evidence in your own Postgres. Point any
Anthropic-SDK client at it and every inference call and MCP tool call
lands in the same audit spine, traceable from identity to cost.
What you get
An AI gateway with a four-stage governance pipeline on every tool call
(scope check, secret scan, blocklist, rate limit), an admin UI, MCP
server orchestration, and a Postgres-backed audit spine linking
identity, agent, tool, result, and cost under one trace id. Ships as
one binary plus your database. It is a library you own and extend, not
a SaaS you rent.
Deploy anywhere
Quickest start:
docker run -d -p 8080:8080 \
-e DATABASE_URL=postgres://... \
-e ANTHROPIC_API_KEY=sk-ant-... \
ghcr.io/systempromptio/systemprompt-template:0.30.1
Every channel below is a copy-paste recipe. Canonical matrix:
docs/README.md.
| Channel | Recipe | Best for |
|---|---|---|
| Docker / GHCR | install/ghcr.md | Any Docker host |
| docker-compose | one-click compose | Single host, bundled Postgres |
| Helm chart | install/helm.md · Artifact Hub | Kubernetes |
| Railway | install/railway.md · Deploy on Railway | Railway PaaS |
| Render | install/render.md · Deploy to Render | Render PaaS |
| Coolify | install/coolify.md | Coolify self-host |
| Dokploy | install/dokploy.md | Dokploy self-host |
| Portainer | install/portainer.md | Portainer stacks |
| CapRover | install/caprover.md | CapRover self-host |
| CasaOS | install/casaos.md | Home lab |
| Zeabur | install/zeabur.md | Zeabur PaaS |
| Northflank | install/northflank.md | Northflank PaaS |
| DigitalOcean 1-Click | install/digitalocean.md (marketplace listing coming soon) | Single-VM droplet |
Binary (curl | sh) |
install/binary.md | Bare metal, VMs |
| Homebrew | install/homebrew.md | macOS servers / dev |
| Nix flake | install/nix.md | NixOS / Nix |
Image tags
:0.30.1is immutable; the floating major
and minor tags track it.:latestmoves only on releases (never on main;:edgetracks main).- Multi-arch (linux/amd64 + linux/arm64), cosign-signed.
Install natively
- Homebrew:
brew tap systempromptio/tap && brew install gateway - Manual: download
systemprompt-gateway-<version>-<target>.tar.gz
(linux-amd64,linux-arm64,darwin-arm64; on Windows run the
gateway via Docker), verify againstSHA256SUMS.gateway, extract.
Contents:systemprompt,systemprompt-mcp-agent,services/,
web/.
Verify signature
cosign verify-blob \
--certificate-identity-regexp='https://github.com/systempromptio/systemprompt-template/' \
--certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
--signature SHA256SUMS.gateway.sig \
--certificate SHA256SUMS.gateway.pem \
SHA256SUMS.gateway