A faithful replay of Legant's Conductor demo: one AI agent calls four MCP servers through one gateway, each tool call is individually authorized, a prompt injection and a replayed token are rejected, the delegation is revoked, and every call is recorded in a tamper-evident hash chain.

Legant Live demo · Conductor

One agent, many MCP servers, a receipt for every tool call

agent:conductor is wired to a fleet of four MCP servers behind one Legant gateway. Alice grants it exactly four tools — every call is minted a fresh, single-tool, single-audience token, verified by each upstream offline. Nothing here is mocked: it’s a faithful replay of the go run ./examples/conductor output.

delegationuser:alice → agent:conductor
delegated tools read_filecreate_commentquerystatus
not delegated merge_to_maindrop_tablechargerollout
repo
read_filecreate_comment
analytics
query
payments
charge
deploy
status
the run · livebooting…
flight recorder · hash-chainedlegant audit
#servertooldecisionprovenancenote
allowed (200) denied — not delegated / wrong audience (403/401) revoked (401) every row carries who-acted-for-whom provenance; the chain detects any edit.