Use Keeptrusts wherever AI runs

Install the kt gateway, create and validate a starter configuration, then run governed traffic from your environment.

Download for Linux

CLI Gateway

Install the local command-line gateway package for your operating system and run policy enforcement from your development environment.

Download Debian package

Terminal

Run the gateway from any shell, script, or local workflow after installing the CLI binary.

curl -fsSLO https://dl.eu.keeptrusts.com/releases/latest/kt-linux-x86_64.deb

Guide

Follow detailed platform steps, verify the install, and move into the first policy-enforced request.

Read the install guide

Download the Keeptrusts gateway for macOS, Windows, and Linux.

0.1.0Latest

Read the install guide →

Setup steps

Install, initialize, and run the gateway.

macOS (Universal)

Download the universal disk image for Apple Silicon and Intel Macs.

  1. 1

    Install the gateway

    Download and install the universal binary.

    curl -fsSLO https://dl.eu.keeptrusts.com/releases/latest/kt-macos-universal.dmg
hdiutil attach kt-macos-universal.dmg
sudo cp /Volumes/Keeptrusts\ Gateway/kt /usr/local/bin/kt
hdiutil detach /Volumes/Keeptrusts\ Gateway
  2. 2

    Verify the install

    Confirm that the kt binary is available.

    kt --version
kt doctor
  3. 3

    Create a starter config

    Create a starter policy configuration file.

    kt init
  4. 4

    Validate and run the gateway

    Validate the configuration, then start the gateway.

    kt policy lint --file policy-config.yaml
kt policy test --json
export KEEPTRUSTS_API_TOKEN="kt_your_gateway_runtime_token"
export KEEPTRUSTS_UPSTREAM_URL="https://api.openai.com"
export KEEPTRUSTS_UPSTREAM_API_KEY="sk-..."
kt gateway run --listen 0.0.0.0:41002 --agent local-evaluation --policy-config policy-config.yaml

Linux (x86_64)

Download the Debian or RPM package for Linux amd64 hosts.

  1. 1

    Install the gateway

    Install the Debian or RPM package for your distribution.

    # Debian / Ubuntu
curl -fsSLO https://dl.eu.keeptrusts.com/releases/latest/kt-linux-x86_64.deb
sudo dpkg -i kt-linux-x86_64.deb

# RHEL / Fedora
curl -fsSLO https://dl.eu.keeptrusts.com/releases/latest/kt-linux-x86_64.rpm
sudo rpm -i kt-linux-x86_64.rpm
  2. 2

    Verify the install

    Confirm that the kt binary is available.

    kt --version
kt doctor
  3. 3

    Create a starter config

    Create a starter policy configuration file.

    kt init
  4. 4

    Validate and run the gateway

    Validate the configuration, then start the gateway.

    kt policy lint --file policy-config.yaml
kt policy test --json
export KEEPTRUSTS_API_TOKEN="kt_your_gateway_runtime_token"
export KEEPTRUSTS_UPSTREAM_URL="https://api.openai.com"
export KEEPTRUSTS_UPSTREAM_API_KEY="sk-..."
kt gateway run --listen 0.0.0.0:41002 --agent local-evaluation --policy-config policy-config.yaml

Linux (ARM64)

Download the binary for ARM64 Linux systems, including 64-bit Raspberry Pi and AWS Graviton systems.

  1. 1

    Install the gateway

    Extract the ARM64 kt binary into your PATH.

    curl -fsSL https://dl.eu.keeptrusts.com/releases/latest/kt-linux-aarch64.tar.gz \
  | sudo tar xz -C /usr/local/bin kt
  2. 2

    Verify the install

    Confirm that the kt binary is available.

    kt --version
kt doctor
  3. 3

    Create a starter config

    Create a starter policy configuration file.

    kt init
  4. 4

    Validate and run the gateway

    Validate the configuration, then start the gateway.

    kt policy lint --file policy-config.yaml
kt policy test --json
export KEEPTRUSTS_API_TOKEN="kt_your_gateway_runtime_token"
export KEEPTRUSTS_UPSTREAM_URL="https://api.openai.com"
export KEEPTRUSTS_UPSTREAM_API_KEY="sk-..."
kt gateway run --listen 0.0.0.0:41002 --agent local-evaluation --policy-config policy-config.yaml

Windows (x86_64)

Download the Windows package and unpack it from PowerShell.

  1. 1

    Download and extract the package

    Download the ZIP package and extract kt.exe.

    Invoke-WebRequest -Uri "https://dl.eu.keeptrusts.com/releases/latest/kt-windows-x86_64.zip" -OutFile kt-windows-x86_64.zip
Expand-Archive kt-windows-x86_64.zip -DestinationPath "$env:LOCALAPPDATA\keeptrusts"
  2. 2

    Verify the install

    Confirm from PowerShell that kt.exe runs.

    $env:PATH += ";$env:LOCALAPPDATA\keeptrusts"
kt --version
kt doctor
  3. 3

    Create a starter config

    Create a starter policy configuration file.

    kt init
  4. 4

    Validate and run the gateway

    Validate the configuration, then start the gateway.

    kt policy lint --file policy-config.yaml
kt policy test --json
$env:KEEPTRUSTS_API_TOKEN = "kt_your_gateway_runtime_token"
$env:KEEPTRUSTS_UPSTREAM_URL = "https://api.openai.com"
$env:KEEPTRUSTS_UPSTREAM_API_KEY = "sk-..."
kt gateway run --listen 0.0.0.0:41002 --agent local-evaluation --policy-config policy-config.yaml

After install

What to do next

Quickstart

Follow the quickstart to validate a configuration and send a policy-enforced request.

Start the quickstart →

Policy catalog

Browse configurable controls for data protection, safety, compliance workflows, routing, and human review.

Explore policies →

Install guide

Detailed installation and configuration instructions for each supported platform.

Read the guide →

Documentation is available at docs.keeptrusts.com.