Smoltbot Gateway
Smoltbot is a transparent AI gateway that sits between your application and any LLM provider. It observes API calls, builds verifiable AP-Traces, runs AIP integrity checks, and verifies behavior against your agent’s Alignment Card. Your prompts and responses pass through unchanged. Your API keys never leave your machine.Initialize
Run
smoltbot init to configure your environment. The CLI detects your configured AI provider API keys (Anthropic, OpenAI, Gemini) and sets up routing through the Mnemom gateway.Output
Your API key is not sent to Mnemom. Only a SHA-256 hash is used to identify your agent. The hash cannot be reversed to recover your key.
Make an API call
Use the gateway URL instead of the provider’s direct URL. The gateway proxies your request to the correct provider, traces it, and returns the response unchanged.The gateway supports all three providers at their standard paths:
| Provider | Gateway Path | Direct Equivalent |
|---|---|---|
| Anthropic | gateway.mnemom.ai/anthropic/* | api.anthropic.com/* |
| OpenAI | gateway.mnemom.ai/openai/* | api.openai.com/* |
| Gemini | gateway.mnemom.ai/gemini/* | generativelanguage.googleapis.com/* |
View traces
After making API calls through the gateway, view what was traced:Use
Output
smoltbot logs -l 20 to show more entries.Claim your agent
Link your agent to your Mnemom account for a full private dashboard:
- Run
smoltbot statusto get your agent ID - Visit mnemom.ai/claim
- Paste your agent ID and prove ownership with your API key hash
Explore the dashboard
Once claimed, your agent’s data is available at mnemom.ai/dashboard. The dashboard shows:
- Conscience timeline — A chronological view of every trace, integrity checkpoint, and enforcement action
- Alignment card — Your agent’s declared values and boundaries
- Integrity scores — AIP verdict history and trend analysis
- Drift alerts — Notifications when behavior diverges from declared alignment
- Enforcement log — Records of nudges and blocks (if enforcement is enabled)
Supported providers
| Provider | Models | Thinking / AIP Support | Auth Header |
|---|---|---|---|
| Anthropic | Claude Opus 4.6, Opus 4.5, Sonnet 4.5 | Full (thinking blocks analyzed directly) | x-api-key |
| OpenAI | GPT-5.2, GPT-5.2 Pro, GPT-5 | Via reasoning summaries (reduced confidence) | Authorization: Bearer |
| Gemini | Gemini 2.5 Pro, Gemini 3 Pro | Full (thought parts analyzed directly) | x-goog-api-key |
AIP compatibility
| Provider / Model | AIP Support | Method |
|---|---|---|
| Anthropic reasoning models (Opus, Sonnet) | Full | Thinking blocks analyzed directly |
| OpenAI GPT-5 Thinking series | Partial | Reasoning summaries (reduced confidence) |
| Gemini 2.5/3 with thinking | Full | Thought parts analyzed directly |
| Non-reasoning models | Tracing only | Synthetic clear verdict |
| Legacy OpenAI (o3/o4-mini) | Unsupported | Reasoning encrypted |
What gets traced
Smoltbot builds AP-Traces that record:- Action — What the agent did (type, name, category)
- Decision — What alternatives were considered and why one was selected
- Escalation — Whether the agent escalated to a human and why
- Verification — Whether the trace is consistent with the agent’s declared Alignment Card
- Integrity — Real-time AIP analysis of thinking blocks, with verdict (
clear/review_needed/boundary_violation)
What is NOT stored
Enforcement modes
Smoltbot supports three enforcement modes when an integrity violation is detected:| Mode | Behavior |
|---|---|
observe | Detect violations, record them, take no action (default) |
nudge | Detect violations, inject feedback into the agent’s next request via system prompt. The agent sees it and can self-correct. |
enforce | Hard block with HTTP 403 for non-streaming requests. Falls back to nudge for streaming. |
Next steps
- View protocol overview to understand how AAP and AIP work together
- Explore concepts to understand Alignment Cards, traces, and integrity
- Read about enforcement for detailed enforcement mode documentation
- Self-host if you need full data residency control