SIEM LOG FORWARDING
AI CLIENTS
agents + tools
MCP tool calls
SEALGATE GATEWAY
each call: allow / block
policy decision per call
FORWARDED LOG EVENTS
"decision":"allow"
"tool":"gmail.send"
"decision":"block"
"tool":"db.export"
audit-ready log store
every call, retained
Allow or block, every tool call becomes a structured, forwarded audit event in your SIEM.