Skip to content
SPECIFICTION
Get listed

Sanctum Runtime

sanctumruntime.com

WebLinuxiOSAndroidAPISelf-hosted
Visit sanctumruntime.com
Spec score 7.2 #19 of 31 in LLM Security Tools

What it is

Sanctum Runtime is middleware that checks actions from AI agents, robots, and automated systems before they are carried out. It evaluates proposed actions against policies and can approve them, ask for verification, or block them. Operators can review, approve, deny, or escalate actions through web and mobile workflows. The product describes behavioral monitoring, audit logs, policy history, and decision trails for runtime visibility and incident review. Its open-core runtime supports local policy checks and offline verification, including local Ollama risk scoring. Documented integrations include OpenAI, Claude/MCP, Gemini-style function calling, DeepSeek, Grok, Bedrock-compatible endpoints, NVIDIA NIM, custom agents, and local runtimes. Developers can use Node and Python SDKs, an MCP wrapper, ROS2-oriented policy packs, and smart-home and embodied-agent templates. The repository is described as MIT-licensed and self-hostable; a hosted console and proxy path are also available. The product identifies itself as embedded runtime middleware, not a standalone consumer app or robot controller. Some enterprise capabilities, including fleet orchestration and organization-wide policy sync, are private.

Spec sheet

Purpose
Sanctum is a runtime trust layer that evaluates AI actions before they execute.Read 9 Oct 2026 · sanctumruntime.com
Intended users
The site presents the product for agent startups, platform and AI engineers, and security or compliance teams.Read 4 Oct 2026 · sanctumruntime.com
Integrations
The same verification path is described for OpenAI, Claude/MCP, Gemini-style function calling, DeepSeek, Grok, Bedrock-compatible endpoints, NVIDIA NIM, custom agents, and local runtimes.Read 9 Oct 2026 · sanctumruntime.com
Action controls
It evaluates actions against policies and can approve, require verification, or block them before execution.Read 4 Oct 2026 · sanctumruntime.com
Action policies
Policies can approve, require verification for, or block actions before execution.Read 9 Oct 2026 · sanctumruntime.com
Audit
Runtime audit trails can include action requests, decisions, policy evaluations, approval states, anomalies, and timestamps.Read 9 Oct 2026 · sanctumruntime.com
Developer access
Developers can install the Node SDK and use an agent adapter, an MCP wrapper, or a hosted OpenAI-compatible proxy.Read 4 Oct 2026 · sanctumruntime.com
Developer support
The documentation lists Node and Python SDKs, an MCP wrapper, ROS2-oriented policy packs, and smart-home and embodied-agent templates.Read 9 Oct 2026 · sanctumruntime.com
Enterprise capabilities
The documentation lists fleet orchestration, organization-wide policy sync, advanced analytics, hosted cloud, compliance, and device attestation as private enterprise features.Read 9 Oct 2026 · sanctumruntime.com
Hosted access
The documentation describes a hosted proxy path for OpenAI-compatible traffic and a cloud dashboard for operator workflows.Read 9 Oct 2026 · sanctumruntime.com
Human approvals
Operators can review, approve, deny, or escalate actions through web and mobile review workflows.Read 4 Oct 2026 · sanctumruntime.com
License and deployment
The repository is described as MIT-licensed and self-hostable; the product also offers a hosted console, while some enterprise capabilities are private.Read 4 Oct 2026 · sanctumruntime.com
Limits
Sanctum describes itself as embedded runtime middleware, not a standalone consumer app or robot controller.Read 4 Oct 2026 · sanctumruntime.com
Local operation
The runtime supports local policy enforcement and offline verification.Read 9 Oct 2026 · sanctumruntime.com
Monitoring
Sanctum describes behavioral monitoring for unusual command sequences, escalation patterns, suspicious remote instructions, and policy violations.Read 9 Oct 2026 · sanctumruntime.com
Monitoring and audit
Sanctum describes behavioral monitoring, audit logs, policy history, and decision trails for runtime visibility and incident review.Read 4 Oct 2026 · sanctumruntime.com
Offline operation
The open-core runtime supports local policy checks and offline heuristics, including local Ollama risk scoring.Read 4 Oct 2026 · sanctumruntime.com
Open source
The documentation says the repository is MIT-licensed and describes the product as open-core.Read 9 Oct 2026 · sanctumruntime.com
Robotics support
The documentation lists Python SDK support, ROS2-oriented policy packs, and smart-home and embodied-agent templates.Read 4 Oct 2026 · sanctumruntime.com
Security mechanisms
The documented security layer includes signed agent and action tokens, short-lived approvals, source-trust context, blast-radius scoring, audit-chain verification, and encrypted platform keys.Read 9 Oct 2026 · sanctumruntime.com
Who it serves
The site describes the product for teams building AI agents, robotics, workflow automation, and other systems that can take real-world actions.Read 9 Oct 2026 · sanctumruntime.com

Strong points and limits

Strong points

  • Can approve, verify, or block actions by policy.
  • Supports local checks and offline verification.
  • Includes web and mobile operator workflows.
  • Offers Node and Python SDKs.
  • Self-hostable under an MIT license.

Limits

  • It is middleware, not a standalone consumer app.
  • It is not a robot controller.
  • Some enterprise capabilities are private.

Who it suits

It suits agent startups, platform and AI engineers, and security or compliance teams building agents, robotics, or automation that can take real-world actions.

Verdict

Sanctum Runtime focuses on policy checks, operator approvals, and audit visibility between agent reasoning and execution. Teams should account for its middleware role and the private status of some enterprise features.

Where Specifiction places it

Alternatives to Sanctum RuntimeAll alternatives →