Developers use Claude Code, Codex, OpenCode, or Pi, with FAgent providing a controlled integration path. Enterprises standardize identity, access, and operational guardrails rather than mandating a single agent experience.
Harness
Runs on
FAgentdesktop runtime
The engineer-side connection.
A desktop runtime, integrating with supported coding harnesses.
A CLI target for headless and sandbox execution: a sandbox starts with an authorized FAgent CLI configuration.
Connects supported harnesses to the enterprise gateway route.
Sets or synchronizes local harness configuration and supported policy controls.
Collects available harness and usage telemetry, subject to configured privacy and security boundaries.
Provides a consistent desktop and headless or sandbox integration point.
For the engineerUse the coding agent you already know.
For the platform teamBring developer-side activity into a managed enterprise path.
FIdentityenterprise user identity
The trust foundation.
Identity and authorization capabilities built on the Ory stack.
The engineer authenticates using the enterprise-approved identity flow.
FIdentity supplies or validates the relevant machine or agent identity context through the configured flow.
Authenticates supported human and workload principals.
Supports authorization and entitlements for access to FDeploy-controlled capabilities.
Provides a foundation for agent identities and authorized use in sandbox environments.
Establishes the identity context FGateway needs for attribution and policy decisions.
For the engineerUse your approved enterprise identity.
For the platform teamKnow who, or what, is requesting AI access.
FGatewaypolicy · routing · attribution
Centralized AI access, routing, and attribution.
The enterprise AI gateway that authorizes and routes requests to approved model endpoints and captures usage and cost attribution.
Applies enterprise-side authorization and routing policies.
Routes requests to configured frontier, open-weight, and private model endpoints.
Normalizes or adapts supported request and response protocols where required.
Attributes usage and model cost to the available identity, harness, team, and route dimensions.
Approved route for this request
For the engineerAccess the approved model for the job.
For the platform teamControl where requests go, and understand who uses what.
The model
One familiar harness. More model choice.
FGateway can expose approved frontier, open-weight, and private model endpoints to compatible coding harnesses. This creates a route to enterprise model experimentation without forcing a new employee workflow.
Frontier modelsApproved frontier model providers.
Open-weight modelsConfigured endpoints, through compatible model adapters.
Private endpointsEnterprise or private endpoints you operate.
Being validated
Claude Code on an approved open-weight endpoint is the signature demonstration, shown in a walkthrough once the end-to-end run is verified for the specific harness version and model.
The record
From invisible usage to accountable engineering AI.
Gateway telemetry can reveal routed request volume, model and provider selection, latency, failures, tokens where supplied, and attributable costs. FAgent adds harness-side observability where supported.
One routed request, the dimensions it carriesExample values
User
engineer@your-org
FIdentity
Team
team: platform
org mapping
Harness
Claude Code
FAgent
Model
approved frontier model
FGateway
Route
approved / frontier
FGateway
Cost
attributed from provider usage
where supplied
Visibility across connected AI coding workflows: coverage depends on supported harness integrations and traffic sent through FGateway, and granularity depends on provider usage data and the configured organization mapping.
Employee device
Claude CodeCodexOpenCodePi
FAgentdesktop runtimeconnected
FIdentityenterprise user identityverified
FGatewaypolicy · routing · attributionrouted
Frontier
Open-weight
Private
How adoption works
Connect a team, govern an approved route, review results, expand.
Start with one engineering team already trialing coding agents. FDeploy's forward-deployed engineers can help connect the first team and implement the approved routes and policies.
Connect a team
Roll out FAgent across selected devices and sandbox environments.
Govern an approved route
Define which identities and teams can access which approved models or routes.
Review results
Inspect model usage, denied and allowed activity, errors, routing, and costs.
Expand
Refine entitlements and approved models based on actual usage.
FAQ
Questions engineers and platform teams ask.
Does FDeploy replace Claude Code, Codex, OpenCode, or Pi?
No. It is designed to work with supported existing coding harnesses, so developers can keep their preferred experience while using an enterprise-managed access path.
Can Claude Code use an open-weight model through FDeploy?
This is a signature use case being validated. FGateway can route to configured open-weight endpoints, but compatibility depends on the harness version, API adaptation, and the target model's capabilities.
Does FDeploy monitor everything a developer does?
No. Coverage depends on supported harness integrations and traffic sent through FGateway. Telemetry collection follows enterprise privacy, retention, and security policy.
Does it work in sandboxed agent environments?
FAgent includes a CLI target intended for headless and sandbox deployment. Individual sandbox environments and identity flows are tested as part of onboarding.
Can it attribute costs to individual employees and teams?
Attribution is an intended core FGateway function using available identity, usage, and route metadata. Granularity and accuracy depend on provider usage data and the configured organization mapping.
Is FDeploy only an LLM gateway?
No. FGateway handles centralized AI routing and attribution; FAgent connects developer environments; FIdentity provides identity and authorization foundations. The value is the integrated control model.
Does it enforce policies?
FGateway is the authoritative enforcement point for traffic it handles; FAgent can configure or enforce supported local controls. FDeploy cannot guarantee enforcement over tools or traffic outside its integration boundary.
Is it tied to a single cloud?
The immediate solution is designed to be cloud-neutral and model-provider agnostic. Provider connections and deployment options are validated for each enterprise environment.
What happens to proprietary code, prompts, and model output?
Handling depends on endpoint configuration, routing policy, and telemetry settings. We walk through security, retention, encryption, and data-residency for your actual deployment.
Next step
Standardize the control plane. Not the developer.
Give engineers flexibility without giving up enterprise control. See Claude Code connect through FAgent to an authorized FGateway route, with the resulting trace and attributed usage.