Freedom251 › LLM Security Tools
Sanctum Runtime
What Sanctum Runtime is
Sanctum Runtime is middleware that checks proposed actions from AI agents, robots, automation, and other embodied systems before they are carried out. It evaluates actions against policies and can approve them, request verification, or block them. Operators can review, approve, deny, or escalate actions using web and mobile workflows. For runtime visibility and incident review, it describes behavioral monitoring, audit logs, policy history, and decision trails. Its open-core runtime supports local policy checks and offline heuristics, including risk scoring with local Ollama. Developers can connect through a Node SDK, an agent adapter, an MCP wrapper, or a hosted OpenAI-compatible proxy. Listed integrations include OpenAI, Claude/MCP, Gemini-style function calling, DeepSeek, Grok, Bedrock-compatible endpoints, NVIDIA NIM, custom agents, and local runtimes. Robotics materials include Python SDK support, ROS2-oriented policy packs, and smart-home and embodied-agent templates. Sanctum is MIT-licensed and self-hostable, with a hosted console also available. It is embedded runtime middleware rather than a standalone consumer app or robot controller; some enterprise capabilities are private. A free plan is listed.
Who it suits
It suits agent startups, platform and AI engineers, and security or compliance teams that need controls around agent actions. Robotics and automation teams may also find its listed SDKs, policy packs, and templates relevant.
What it does well
- Can approve, verify, or block actions against policies
- Web and mobile workflows for operator review
- Supports local policy checks and offline heuristics
- Self-hostable under an MIT license
- Lists Python SDK and ROS2-oriented policy packs
What to know first
- Not a standalone consumer app or robot controller
- Some enterprise capabilities are private
Getting started
- Open https://www.sanctumruntime.com/.
- Choose the hosted console or self-host the MIT-licensed repository.
- Install the Node SDK for developer access.
- Connect an agent through the adapter, MCP wrapper or hosted OpenAI-compatible proxy.
- Configure policy checks and operator review workflows for web or mobile.
Verdict
Sanctum Runtime is aimed at teams that need policy checks and operator oversight between AI reasoning and execution. Its free plan, self-hosting option, offline checks, and range of documented integrations provide several deployment paths, but it is middleware rather than a complete end-user product.
Questions
Is Sanctum Runtime free?
Yes. The pricing model is freemium and a free plan is listed.
Which platforms does it support?
The listed platforms are Android, API, iOS, self-hosted and web.
Is it open source?
The repository is described as MIT-licensed and self-hostable. Some enterprise capabilities are private.
Can it run offline?
The open-core runtime supports local policy checks and offline heuristics, including local Ollama risk scoring.
What integrations are documented?
The verify path supports OpenAI, Claude/MCP, Gemini-style function calling, DeepSeek, Grok, Bedrock-compatible endpoints, NVIDIA NIM, custom agents and local runtimes.
Who is Sanctum for?
The site presents it for agent startups, platform and AI engineers, and security or compliance teams.
Facts from Sanctum Runtime's own pages
- Action controls
- It evaluates actions against policies and can approve, require verification, or block them before execution. · sanctumruntime.com, 4 Oct 2026
- Action policies
- Policies can approve, require verification for, or block actions before execution. · sanctumruntime.com, 9 Oct 2026
- Audit
- Runtime audit trails can include action requests, decisions, policy evaluations, approval states, anomalies, and timestamps. · sanctumruntime.com, 9 Oct 2026
- Developer access
- Developers can install the Node SDK and use an agent adapter, an MCP wrapper, or a hosted OpenAI-compatible proxy. · sanctumruntime.com, 4 Oct 2026
- Developer support
- The documentation lists Node and Python SDKs, an MCP wrapper, ROS2-oriented policy packs, and smart-home and embodied-agent templates. · sanctumruntime.com, 9 Oct 2026
- Enterprise capabilities
- The documentation lists fleet orchestration, organization-wide policy sync, advanced analytics, hosted cloud, compliance, and device attestation as private enterprise features. · sanctumruntime.com, 9 Oct 2026
- Hosted access
- The documentation describes a hosted proxy path for OpenAI-compatible traffic and a cloud dashboard for operator workflows. · sanctumruntime.com, 9 Oct 2026
- Human approvals
- Operators can review, approve, deny, or escalate actions through web and mobile review workflows. · sanctumruntime.com, 4 Oct 2026
- Integrations
- The same verification path is described for OpenAI, Claude/MCP, Gemini-style function calling, DeepSeek, Grok, Bedrock-compatible endpoints, NVIDIA NIM, custom agents, and local runtimes. · sanctumruntime.com, 9 Oct 2026
- Intended users
- The site presents the product for agent startups, platform and AI engineers, and security or compliance teams. · sanctumruntime.com, 4 Oct 2026
- License and deployment
- The repository is described as MIT-licensed and self-hostable; the product also offers a hosted console, while some enterprise capabilities are private. · sanctumruntime.com, 4 Oct 2026
- Limits
- Sanctum describes itself as embedded runtime middleware, not a standalone consumer app or robot controller. · sanctumruntime.com, 4 Oct 2026
- Local operation
- The runtime supports local policy enforcement and offline verification. · sanctumruntime.com, 9 Oct 2026
- Monitoring
- Sanctum describes behavioral monitoring for unusual command sequences, escalation patterns, suspicious remote instructions, and policy violations. · sanctumruntime.com, 9 Oct 2026
- Monitoring and audit
- Sanctum describes behavioral monitoring, audit logs, policy history, and decision trails for runtime visibility and incident review. · sanctumruntime.com, 4 Oct 2026
- Offline operation
- The open-core runtime supports local policy checks and offline heuristics, including local Ollama risk scoring. · sanctumruntime.com, 4 Oct 2026
- Open source
- The documentation says the repository is MIT-licensed and describes the product as open-core. · sanctumruntime.com, 9 Oct 2026
- Purpose
- Sanctum is a runtime trust layer that evaluates AI actions before they execute. · sanctumruntime.com, 9 Oct 2026
- Robotics support
- The documentation lists Python SDK support, ROS2-oriented policy packs, and smart-home and embodied-agent templates. · sanctumruntime.com, 4 Oct 2026
- Security mechanisms
- The documented security layer includes signed agent and action tokens, short-lived approvals, source-trust context, blast-radius scoring, audit-chain verification, and encrypted platform keys. · sanctumruntime.com, 9 Oct 2026
- Who it serves
- The site describes the product for teams building AI agents, robotics, workflow automation, and other systems that can take real-world actions. · sanctumruntime.com, 9 Oct 2026
Where Sanctum Runtime stands on Freedom251
- LLM Security Tools#10 of 31