← All integrationsINTEGRATION · AI PROVIDERS

Kapālins for Oracle OCI Generative AI

xAI’s Grok models through Oracle OCI Generative AI. Your applications call Kapālins instead of Oracle OCI Generative AI: the prompt is checked on the way out, the reply on the way back, and Oracle OCI Generative AI’s key never leaves the vault.

See it governed live Setup in four steps

Stop it before it leaves

A prompt carrying a customer record, a secret or an injection attempt is redacted or blocked before Oracle OCI Generative AI sees it. The reply is checked on the way back.

One key no app ever holds

Each application gets its own virtual key. Oracle OCI Generative AI’s key is sealed in Kapālins, rotates without a redeploy, and can be cut off per app in one click.

Every model, judged

Oracle OCI Generative AI’s models are approved or blocked one by one, by a person, with who decided and when.

ONE DOOR

One endpoint, one key, every provider.

Point the application at your gateway host with a virtual key. Kapālins routes to Oracle OCI Generative AI with the key it holds, fails over when Oracle OCI Generative AI is down, and meters every call to the team that made it.

Your app speaks OpenAI API format
3 Oracle OCI Generative AI models priced, so spend lands on a team the same day
Block the provider domains at your firewall and this becomes the only way out

Kapālins AI Gateway: one endpoint, virtual keys and the connected providers — The gateway in the pilot tenant on production: one endpoint, virtual keys, and the providers behind them. Key prefixes masked.

The gateway in the pilot tenant on production: one endpoint, virtual keys, and the providers behind them. Key prefixes masked.

AGENTS

Agents calling Oracle OCI Generative AI, fingerprinted.

Every agent and service key that calls Oracle OCI Generative AI through the gateway gets a behaviour baseline: calls, active hours, models, prompt repetition, injection rate. When one drifts it is flagged with the reasons, and one click drafts a guardrail or quarantines the key.

The tools and MCP servers each agent actually invoked
Detect only by default; quarantine is one click and reversible

Kapālins Agentic Behaviour: an agent key flagged, with its score derivation and behavioural fingerprint — A replay of the Kapālins console: an agent flagged for injection activity, its score explained line by line, its fingerprint against baseline, and the MCP calls it made outside its declared scope. Agent names and activity are illustrative.

A replay of the Kapālins console: an agent flagged for injection activity, its score explained line by line, its fingerprint against baseline, and the MCP calls it made outside its declared scope. Agent names and activity are illustrative.

MODEL ASSURANCE

Oracle OCI Generative AI models: approved by a person.

Each Oracle OCI Generative AI model is approved or blocked by a person, with who decided and when. On Growth and Fortress, Policy Shield acts on the verdict at the gateway; on Foundation it records what it would have refused.

A model nobody has approved is not served by the gateway

Kapālins AI Systems: per-model approve, conditional and block verdicts by provider — Per-model verdicts in the pilot tenant, from the Probe Runner: approved, conditional or blocked before anyone relies on them.

Per-model verdicts in the pilot tenant, from the Probe Runner: approved, conditional or blocked before anyone relies on them.

Setup

Four steps.

Add the providerIntegrations › Oracle OCI Generative AI › paste the key. Kapālins checks it with a live call, then seals it.
Issue virtual keysOne per application or agent, each with its own policy, models and budget.
Change the base URLPoint the application at the gateway. Request and reply formats stay as they are.
Detect, then enforceEvery shield starts in detect, so nobody is blocked on day one. Enforcing needs the AI gateway at Protect; below it, the gateway records what it would have blocked.

Request a briefing

See Oracle OCI Generative AI governed in thirty minutes.

Bring the person who holds the credential. We connect it live and watch the first events land.

Request a briefing All integrations

FAQ

Questions buyers ask.

Does the gateway add latency to Oracle OCI Generative AI calls?

Policy Shield runs in the request path. Each family can be set to detect only, and the gateway reports its own added time per call in the timeline.

Do my applications need code changes?

A base URL and a key. The gateway accepts the OpenAI and Anthropic formats, so request and response handling stay as they are.

Can Oracle OCI Generative AI be governed without the gateway?

Routing is what makes inline control possible. AI that cannot be routed, such as hosted copilots, is governed from its audit logs, identity grants and the device sensor instead.