Documentation
Product docs for the IBEX Harness auth service, LLM proxy, and operator surfaces that ship today.
IBEX Harness is a self-hosted AI agent platform: an authenticated LLM proxy, multi-tenant identity service, and (in later phases) persistent agent memory. These docs describe what ships on main today.
Live program status: current state. Design rationale lives in ADRs.
Start here
Quickstart
TutorialBoot compose-dev and send a chat completion in mock mode.
Learn more →Concepts
GuideTenancy, PATs, proxy critical path, and phase honesty.
Learn more →Architecture overview
GuideServices, data stores, and request flow.
Learn more →Chat completions API
ReferenceHTTP shape, errors, and streaming notes.
Learn more →HTTP route inventory
ReferencePublic and protected proxy paths as implemented.
Learn more →Integrate the proxy
Proxy overview
GuideMiddleware chain from auth to provider forward.
Learn more →Authentication
GuidePATs, agent verify, cache, and revocation.
Learn more →Provider modes
GuideMock vs live OpenAI-compatible forwarding.
Learn more →Issuing API keys
GuideCreate and revoke org-scoped PATs.
Learn more →Platform features (Phase 2)
These Phase 2 surfaces are implemented. Use the guides below for configuration and failure modes.
Directives
GuideOrg directives and system-prompt injection.
Learn more →Sessions
GuideSession lifecycle and checkpoints.
Learn more →Auth cache
GuideBloom + LRU cache with revocation.
Learn more →Traces & ClickHouse
GuideAsync LLM trace writes.
Learn more →Operate and harden
Observability
GuideMetrics, logs, and OpenTelemetry.
Learn more →Environment variables
ReferenceRuntime configuration registry.
Learn more →Security overview
GuideFail-closed auth and tenant isolation.
Learn more →Troubleshooting
GuideCommon local and production failures.
Learn more →Was this page helpful?
Last updated on