Docs · Developer guide

Start with Optics. Add Gate or Phantom Engine when you need them.

Optics is free egress monitoring: wrap an agent, record where it connects, export a proof. Gate turns destination blocking, redaction, and spend limits into live decisions on that same wrap. Phantom Engine is runtime enforcement on Linux you enroll. Product pages cover what ships today; this page owns the install depth.

GitHub · open core Optics product page

terminal · vantio run node agent.jsIdle

$ vantio run node agent.js

[ ∅ VANTIO ] run · Mission Control · optics offline

[ ∅ VANTIO ] Outbound LLM call intercepted
  host:  awaiting LLM egress
  → OBSERVED · metadata only

[ ∅ VANTIO ] Run Summary
  LLM calls: 0
  action:    OBSERVED

Already on the wrap

Model APIs and runtimes we actually cover.

Optics sees egress to these model APIs without reading conversations. On Node that is fetch, undici, http/https, http2, net/tls, WebSocket, and spawned curl or wget. On Python, vantio run or shield() records urllib, http.client, sockets, and requests, httpx, aiohttp, or urllib3 when those libraries are installed, plus spawned curl or wget. Browser paths stay outside this wrap.

Model APIs

OpenAI, including regional endpoints
Anthropic
Google Gemini
Google Vertex AI
Amazon Bedrock
Azure OpenAI
Azure AI
Cohere
Mistral
Groq
Together AI
Perplexity
xAI
DeepSeek
Fireworks
OpenRouter
Cerebras
Voyage AI
SambaNova
DeepInfra
Hugging Face Inference
Replicate
Ollama
NVIDIA NIM (hosted)

Agent runtimes

Node fetch
undici.fetch
undici.request
undici.stream
Node http/https
Node http2
Node net/tls
Node WebSocket
Node-spawned curl/wget
Python urllib (vantio run / shield())
Python http.client (vantio run / shield())
Python requests (vantio run / shield())
Python httpx (vantio run / shield())
Python aiohttp (vantio run / shield())
Python urllib3 (vantio run / shield())
Python sockets (vantio run / shield())
Python-spawned curl/wget (vantio run / shield())

Hosts you own

Linux

Optics quickstart

No account. No conversation retention. Report only — OBSERVED connection facts.

Install the CLI

One global install on macOS, Linux, or Windows (WSL).

npm i -g @vantio/cli

Wrap the agent process

Prefix your usual Node command. Optics sees egress on the wrap without reading conversations — fetch, undici, http/https, http2, net/tls, WebSocket, and spawned curl or wget to known LLM hosts (OpenAI, Anthropic, Bedrock, Vertex AI, and similar). Browser paths stay outside this wrap.

# agent.js must call an LLM API via fetch (e.g. api.openai.com)
vantio run --summary node agent.js

Optional: Optics MCP

Read-only observe in Cursor (or similar). List runs, export proofs, discover hosts. Cannot block or enforce.

npx -y @vantio/optics-mcp

Cursor · mcp.json

{
  "mcpServers": {
    "vantio-optics": {
      "command": "npx",
      "args": ["-y", "@vantio/optics-mcp"]
    }
  }
}

Export a proof & inspect

Export a shareable proof, search or tail a captured run, or compare two runs — no account required. vantio prove always uses the most recent run log under ~/.vantio/runs/. If a run never intercepted an LLM call, no new log is written and prove can show an older run — confirm with vantio prove --list that the top row matches the run you just finished.

vantio prove --list
vantio prove
vantio search openai
vantio tail
vantio diff <run-a> <run-b>
vantio discover --local

Python agents

Install vantio-agent-sdk from PyPI, then vantio run python agent.py. That wrap records urllib, http.client, sockets, and requests, httpx, aiohttp, or urllib3 when those libraries are installed, plus spawned curl or wget. shield() is still available when you want a trace id inside the process. Browser paths stay outside this wrap.

pip install vantio-agent-sdk
vantio run python agent.py

What comes after Optics

After you can see the wire, Gate applies the rules you set on that same wrap. Phantom Engine protects Linux you enroll when a process never loads it. This page keeps the Optics install depth. Product pages and Support cover the rest.

Product pages

Each product page is the canonical place for what that layer does. Questions that are not install steps live on Support.

Observe

Vantio Optics

Wrap, watch, report. Traffic outside the wrap stays outside the report.

Optics product →

Enforce

Vantio Gate

Rules that stick — preview, then enforce.

Gate product →

Control

Phantom Engine

Runtime protection on Linux you enroll, plus a named gap when the host sees traffic the wrap never recorded.

Phantom Engine →

How the pieces fit: Architecture. Framework readiness: Compliance. Questions: Support.