# Warden

> The warden between your agents and your database. Governed data access for AI agents.

- [Warden](https://warden.buildlab.in/index.md): The warden between your agents and your database. Agents get database superpowers, not database destruction powers.
- [Quickstart](https://warden.buildlab.in/quickstart.md): Install Warden, put it in front of your own PostgreSQL, and watch a change wait for you — in about ten minutes.
- [What you get](https://warden.buildlab.in/what-you-get.md): Every capability Warden offers today, what provides it, and what is still on the roadmap.
- [Overview](https://warden.buildlab.in/offerings/overview.md): Every artefact Warden ships, what it is for, and how you get it.
- [warden — the gateway](https://warden.buildlab.in/offerings/gateway.md): The server that holds your database credentials and decides what each agent may do with them.
- [warden-mcp — the MCP server](https://warden.buildlab.in/offerings/mcp-server.md): Exposes a Warden gateway to any MCP-speaking agent as four tools, and contains no enforcement logic of its own.
- [wardencert — certification](https://warden.buildlab.in/offerings/wardencert.md): A connector is not done when it runs a query. It is done when it passes this.
- [Container image](https://warden.buildlab.in/offerings/container.md): A distroless image of the gateway, and a compose stack that brings up Warden and PostgreSQL together.
- [Is Warden a Go package?](https://warden.buildlab.in/offerings/go-module.md): Warden is a binary you run, not a library you import — and the reason is the whole product.
- [SDKs](https://warden.buildlab.in/offerings/sdks.md): Planned, not shipped. Until then, the API is small enough to call directly — and here is how.
- [Homebrew](https://warden.buildlab.in/install/homebrew.md): Install the gateway and the MCP server on macOS or Linux.
- [go install](https://warden.buildlab.in/install/go-install.md): For people with access to the private source repository.
- [Docker](https://warden.buildlab.in/install/docker.md): Run the gateway as a container, alone or with a PostgreSQL beside it.
- [From source](https://warden.buildlab.in/install/source.md): Clone, build, and run the full development environment, including the certification suite.
- [Releases and verification](https://warden.buildlab.in/install/releases.md): What a release contains, how it is built, and how to check that what you downloaded is what was published.
- [warden.yaml](https://warden.buildlab.in/configure/warden-yaml.md): The gateway's configuration: connections, agents, operators, state, TLS, and lease bounds.
- [Policy](https://warden.buildlab.in/configure/policy.md): What an agent may touch, what needs a human, what is masked, and what the engine must guarantee before the connection will start.
- [Approvals](https://warden.buildlab.in/configure/approvals.md): Blocking and async modes, what the reviewer sees, and what happens between a decision and a commit.
- [Notifications](https://warden.buildlab.in/configure/notifications.md): Send what is waiting for a human to somewhere a human looks — signed, and never in the way.
- [TLS and state](https://warden.buildlab.in/configure/tls-and-state.md): Serving safely off loopback, and what Warden keeps on disk.
- [CLI reference](https://warden.buildlab.in/operate/cli.md): warden serve, debug attach, audit, policy lint, and keygen.
- [Operator view](https://warden.buildlab.in/operate/operator-view.md): The browser interface: what is waiting, what it would do, and the buttons that decide.
- [Debug Mode](https://warden.buildlab.in/operate/debug-mode.md): A breakpoint debugger for your agent's database traffic.
- [Metrics](https://warden.buildlab.in/operate/metrics.md): What Warden exposes to a monitoring system, and the six questions those numbers answer.
- [Audit](https://warden.buildlab.in/operate/audit.md): A tamper-evident record of every decision, and how to read it after an incident.
- [Architecture](https://warden.buildlab.in/concepts/architecture.md): One path, one representation, one place the credentials live.
- [The capability ladder](https://warden.buildlab.in/concepts/capability-ladder.md): Every protection labelled with who actually provides it — and a connection that refuses to start when the engine cannot deliver.
- [Blast radius](https://warden.buildlab.in/concepts/blast-radius.md): Whether an operation is provably bounded, decided before it runs.
- [Previews and fences](https://warden.buildlab.in/concepts/previews-and-fences.md): Show the reviewer what will happen — then refuse the commit if the data moved.
- [Leases](https://warden.buildlab.in/concepts/leases.md): Agent access with an expiry attached, issued on demand and revocable.
- [Masking](https://warden.buildlab.in/concepts/masking.md): Keep customer data out of a model's context, without making the agent useless.
- [Reliability](https://warden.buildlab.in/concepts/reliability.md): Circuit breakers, idempotency, loud failures, and per-agent pools.
- [PostgreSQL](https://warden.buildlab.in/engines/postgresql.md): The reference connector: certified against a real server on every commit.
- [MongoDB](https://warden.buildlab.in/engines/mongodb.md): The second engine: command documents governed the same way as SQL.
- [Neo4j](https://warden.buildlab.in/engines/neo4j.md): The third engine: a governed subset of Cypher, refused by default.
- [In-memory engine](https://warden.buildlab.in/engines/memory.md): The reference implementation of the connector contract — for demos, tests, and writing new connectors.
- [Roadmap](https://warden.buildlab.in/engines/roadmap.md): What is planned, in what order, and what is deliberately not promised.
- [Data plane](https://warden.buildlab.in/api/data-plane.md): What an agent talks to: run an operation, read the schema, confirm identity, collect an async outcome.
- [Control plane](https://warden.buildlab.in/api/control-plane.md): What operators talk to: approvals, debug sessions, leases, agents, audit, and the live event stream.
- [Errors](https://warden.buildlab.in/api/errors.md): Every code Warden returns, what it means, and whether retrying can help.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.