Policies in plain language
Write what an agent must never do, read or say, with examples of where the line is. Policies can check what a person sends, each action an agent takes, and its reply.
Governance
Your rules around every model call and every action.
Agents act on real systems. RocketKind puts your team’s rules in the path of everything they do: what they may say, what they may touch, what needs a person, and what they may spend.
Guardrails
Guardrails your team writes, checked where you choose.
Our governance and architecture brief covers how checks, approvals and budgets behave in detail. Talk to us for a copy.
Judged by the model you choose
The agent’s own model, a model from any provider you connect, or TypeSafe AI’s Jev, a judge built to answer with probabilities instead of prose.
Approvals for what matters
Choose which actions an agent takes on its own, which ask a person first, and which it never takes.
Limits on every request
Cap how far an agent can go on one request, so nothing runs away with your time or your money.
Budgets
Spend caps for every agent, workspace and key.
Caps for each agent
Set what an agent may spend in one conversation and in one day.
Everything counts
Spend from the tools, workflows and agents an agent uses counts against its cap.
Ceilings above agents
Set ceilings for each workspace and the whole organization, and token and spend limits for each API key.
Spend you can see
Every model call is priced and attributed to the agent, workspace and key that made it.
Security
Built for the systems you can’t afford to get wrong.
Permissions on every asset
Roles, teams and per-asset sharing, with Admin, Manager, Editor and Viewer roles in every workspace. Nobody can grant more than they have.
An audit log that keeps no secrets
Every change is recorded, append-only. The log records which fields changed, never their values.
Encryption with your keys
Secrets and sensitive fields are encrypted at rest with AES-256-GCM, under platform keys or your own in AWS KMS, Google Cloud KMS, Azure Key Vault or HashiCorp Vault, with audited rotation.
Private Network Tunnels
An agent you run inside your network opens an outbound connection, so RocketKind reaches internal systems without inbound ports or a VPN.
Single sign-on
Sign in through your identity provider and its multi-factor policies. SOC 2 is in progress.
Run it where you need it
Managed by us on the cloud you choose, deployed into your own cloud account, or on-premises.
The product
Explore the rest of the platform.
- AgentsAlways-on agents in chat, email, support desks, SMS and phone calls, each with its own identity.
- WorkflowsDurable workflows that wait days for a person, retry what fails and reach 800+ apps.
- LLM gatewayOne endpoint for 30+ model providers on your own keys, with routing, fallback and cost control.
- Memory & contextMemory, business definitions, skills, documents and your own data model, shared by every agent.
- APIs & MCPPublish any workflow or agent as a versioned API or an MCP server, with keys, quotas and limits.