Last updated: October 5, 2026
Install and run locally
Zero procurement. Point at any OpenAI-compatible endpoint and ship.
pip install kimss-forge
from kimss_forge import Agent, tool # Kimss Forge
@tool
def multiply(a: float, b: float) -> float:
"""Multiply two numbers."""
return a * b
agent = Agent(model="gpt-4o-mini", tools=[multiply])
print(agent.run("What is 6 times 7?"))
One line to the Kimss control plane
Same agent code. Production governance when security requires it.
agent = Agent(
model="custom:your-vaulted-model",
tools=[multiply],
gateway="kimss",
agent_id="ops_bot",
workspace_key="kimss_...",
)
That sets base_url=https://api.kimss.ai/v1 and sends X-Kimss-Agent-Id. Disable the agent in Kimss and attributed traffic stops (kill switch). Use Agent.delegate(...) to mint child spans with lineage headers on multi-agent runs. See agent kill switch and AI gateway.
Supply chain and tools
Forge runs tools locally; the gateway path adds attestation and result shielding on the hop.
Optional MCP (pip install 'kimss-forge[mcp]') keeps tool servers in your environment. With gateway="kimss", Kimss pins tool schema fingerprints, scans new tool outputs before they re-enter the model, and enforces declared delegation trees (depth, one run envelope, branch quarantine on Scale+). Kimss blocks or annotates — it does not rewrite tool payloads.
What stays free vs what CISOs buy
Open core: the MIT harness is free forever; the SaaS is a 14-day Production trial, then paid tiers (Developer is an unlisted floor after trial — not a marketed SKU).
- Free forever (OSS): local agent loop, tools, optional MCP —
kimss-forge. - Developer gateway (unlisted floor): after trial, limited Invisible Proxy, inventory, audit trail, kill switch, 25k governed requests/month until you subscribe.
- Production+: Authority Boundary, Threat Intercepts UI, Team & Access, PII scrub, argument-policy editing.
- Scale / Enterprise: Entra SSO, SCIM, longer retention, alerts.
Full ladder: /pricing.
Frequently asked questions
Do I need a Kimss account to use the harness?
No. kimss-forge runs locally against any OpenAI-compatible endpoint with your own provider key. A Kimss account is only needed when you set gateway="kimss" for production governance.
What is free vs paid?
The harness is MIT and free forever. Kimss SaaS starts with a 14-day Production trial (no card). After trial, an unlisted Developer floor keeps limited gateway access until you subscribe. Authority Boundary, Team and Access, Threat Intercepts UI, PII scrub, tool-loop guardrails, delegation governance, branch quarantine, SSO, and SCIM are on paid Production, Scale, or Enterprise plans.
How do I connect production governance?
Pass gateway="kimss", an agent_id, and a kimss_ workspace key on Agent. Traffic routes to https://api.kimss.ai/v1 with X-Kimss-Agent-Id so kill switch, metering, and audit apply.