Atria Systems

Atria is a zero-trust gateway designed to help organizations govern access by third-party AI agents without replacing their existing API gateway, web application firewall, or identity and access management systems. It operates as a reverse proxy between external agents and protected APIs, authenticating requests, enforcing policies, and recording decisions before calls reach internal services.

Each agent receives a short-lived, 15-minute certificate tied to a named credential. Atria checks every request against default-deny policies defined in a YAML file that teams keep in version control. These rules can limit permitted methods and paths, request rates, and transaction values. Requests that fall outside the policy are rejected, with a reason code recorded in an append-only audit log.

The gateway supports offline certificate validation, revocation checks, and mTLS or signed header proof for deployments where TLS terminates upstream. It is designed to work with MCP servers, tool endpoints, and enterprise APIs without requiring an SDK or backend changes.