AI Governance
Your team's control over agents, with proof for audit
Roles decide who in your company can change agents and policies. Approvers decide the calls a policy holds, and every call leaves a record you can download for an auditor.
How it works
AI agent governance, from who sets the rules to what gets recorded
All of it is set in the console: account roles, the approvers on each Approve policy, how each person is notified and the audit record of each call.
-
01 Team roles
Account roles decide who can change agents, servers and policies
Each person in a Meandr account holds one role: Owner, Admin, Member or Billing. Owners and admins open every workspace. A member opens only the workspaces they were added to, with Admin, Write or Read access in each.
- The Billing role sees billing only
- Meandr refuses any role change that would leave the account without an owner
- Removing a person from the account removes their access to every workspace
Invite memberThey'll get an email invitation. Team owners and admins reach every workspace automatically; members get explicit access via workspace memberships.
Emailteammate@example.comRoleMemberExpires (optional) ?dd.mm.yyyy, --:--Workspace access (optional) ? + Add workspaceCancelSend invitation -
02 Approvers
People seated on an Approve policy decide the calls that policy holds
An Approve policy holds a call until a person decides. You seat the people who decide on that policy, and Meandr records each decision under the approver's own sign-in.
MCP Governance: how a held call gets approved MCP Gateway: rate limits1NotificationsTool approval needed in Acme dev2mbrowser_evaluate on Playwright
Review and approve or reject it before it expires on November 3, 2026 at 14:00 UTC.
Review request -
03 Notifications
Each person chooses how approval requests and server questions reach them
Every kind of event can reach you in the app, by email or both. Everything is on until you turn it off.
- An approval email carries the approver's own code to decide in the agent's chat
- A server's question comes with an Answer the question button, and anyone with access can answer
NotificationsWhere each kind of event reaches you. These choices are yours alone and apply across every team you belong to.
Everything is on until you turn it off.
TOOL CALLSIN-APPEMAIL- Approval requestA human decision needed to perform an action.
- Input requiredAn MCP is asking for input.
- Approval queue fullThe pending-approvals cap was reached; new requests are auto-denied until the queue drains.
SERVERSIN-APPEMAIL- Tunnel disconnectedWe've lost connection to your stdio server.
- Reconnection requiredCredential rotation gave up — the server needs re-authentication.
-
04 Audit record
Each tool call leaves a record you can hand to an auditor
Meandr records every call, whatever the outcome: the agent, the tool, the deciding policy and any approval decision. For an auditor, open Traffic → Archive and download a date range as one file, with a line per call.
- Archive downloads work on every plan, Developer included
- On the Business plan, Traffic → Insight queries many days of calls without a download
Traffic
ArchiveDownload the traffic this workspace retains — one file per range, with a line per call and the captured request and response bodies alongside.
New downloadLast 30 daysThis monthLast monthLast 90 daysCustom Covers completed days ?Prepare Last 30 days Building takes a while — it appears below and keeps going if you leave the page.DownloadsRun againReady2026-08-05 → 2026-09-03Sep 3, 2026, 10:10 AM · DS · 602 calls · 15.1 MB
The file has expired. Run the range again for a fresh one.
Run againReady2026-07-29 → 2026-08-27Aug 27, 2026, 10:57 PM · DS · 301 calls · 1.8 MB
The file has expired. Run the range again for a fresh one.
Questions about AI Governance
How does Meandr fit with our GRC program?
Can we show an auditor what our agents did last quarter?
Invite your team and write the first policy
Run any MCP server in Meandr or connect the ones you already have, then point every agent at one MCP gateway. Policy, approvals and audit cover every call, with no code changes.
Try for freeQuestions? Email us