Download for Linux

Install the gateway.
Ship AI with confidence.

One CLI binary. Every provider. Full policy enforcement from the first request.

Terminal 
$ kt init
✓ Config created — policy-config.yaml
$ kt gateway run
✓ Gateway listening on :41002
Download binary Read the install guide

macOS (Universal)

Download the universal disk image for Apple Silicon and Intel Macs.

Download macOS disk image

Available packages

Universal disk image (.dmg) .dmg

Setup steps

  1. 1

    Install the gateway

    Download and install the universal binary.

    curl -fsSLO https://dl.keeptrusts.com/releases/latest/kt-macos-universal.dmg
hdiutil attach kt-macos-universal.dmg
cp /Volumes/Keeptrusts\ Gateway/kt /usr/local/bin/kt
hdiutil detach /Volumes/Keeptrusts\ Gateway
  2. 2

    Initialize

    Create a default policy configuration file.

    kt --version
kt doctor
  3. 3

    Start the gateway

    Run the gateway and start enforcing policies.

    kt init
  4. 4

    Validate and run the gateway

    Lint the config, run the policy tests, then start the OpenAI-compatible gateway locally.

    kt policy lint --file policy-config.yaml
kt policy test --json
export OPENAI_API_KEY="sk-..."
kt gateway run --policy-config policy-config.yaml

Linux (x86_64)

Download the binary or use the install script for Linux amd64.

Download binary

Available packages

Binary (.tar.gz) .deb
Debian package (.deb) .rpm

Setup steps

  1. 1

    Download and extract

    Download the binary and make it executable.

    # Debian / Ubuntu
curl -fsSLO https://dl.keeptrusts.com/releases/latest/kt-linux-x86_64.deb
sudo dpkg -i kt-linux-x86_64.deb

# RHEL / Fedora
curl -fsSLO https://dl.keeptrusts.com/releases/latest/kt-linux-x86_64.rpm
sudo rpm -i kt-linux-x86_64.rpm
  2. 2

    Initialize

    Create a default policy configuration file.

    kt --version
kt doctor
  3. 3

    Start the gateway

    Run the gateway and start enforcing policies.

    kt init
  4. 4

    Validate and run the gateway

    Run the config checks before you export credentials and start the gateway.

    kt policy lint --file policy-config.yaml
kt policy test --json
export OPENAI_API_KEY="sk-..."
kt gateway run --policy-config policy-config.yaml

Linux (ARM64)

Download the binary for ARM-based Linux systems including Raspberry Pi and Graviton.

Download binary

Available packages

Binary (.tar.gz) .tar.gz

Setup steps

  1. 1

    Download and extract

    Download the ARM64 binary and make it executable.

    curl -fsSL https://dl.keeptrusts.com/releases/latest/kt-linux-aarch64.tar.gz \
  | sudo tar xz -C /usr/local/bin
  2. 2

    Initialize

    Create a default policy configuration file.

    kt --version
kt doctor
  3. 3

    Start the gateway

    Run the gateway and start enforcing policies.

    kt init
  4. 4

    Validate and run the gateway

    Lint and test the config, then launch the gateway with your provider credential exported.

    kt policy lint --file policy-config.yaml
kt policy test --json
export OPENAI_API_KEY="sk-..."
kt gateway run --policy-config policy-config.yaml

Windows (x86_64)

Download the Windows binary or use the MSI installer.

Download installer

Available packages

MSI installer (.msi) .zip

Setup steps

  1. 1

    Download and install

    Run the MSI installer or extract the binary.

    Invoke-WebRequest -Uri "https://dl.keeptrusts.com/releases/latest/kt-windows-x86_64.zip" -OutFile kt-windows-x86_64.zip
Expand-Archive kt-windows-x86_64.zip -DestinationPath "$env:LOCALAPPDATA\keeptrusts"
  2. 2

    Initialize

    Open a terminal and create a default policy configuration.

    $env:PATH += ";$env:LOCALAPPDATA\keeptrusts"
kt --version
kt doctor
  3. 3

    Start the gateway

    Run the gateway and start enforcing policies.

    kt init
  4. 4

    Validate and run the gateway

    Check the generated config, then export your provider credential and start the gateway.

    kt policy lint --file policy-config.yaml
kt policy test --json
$env:OPENAI_API_KEY = "sk-..."
kt gateway run --policy-config policy-config.yaml

After install

What to do next

Quickstart

Run your first policy-enforced request in under five minutes.

Start the quickstart →

Policy catalog

Browse 40+ built-in safety, compliance, and content policies.

Explore policies →

Install guide

Detailed installation and configuration instructions for every platform.

Read the guide →

Documentation is available at docs.keeptrusts.com. If the docs site is temporarily unavailable, see the README in the installation package for quickstart instructions.