Eden Developer Docs

Welcome to Eden, a governed infrastructure platform for routing, observing, and controlling access to models, tools, APIs, databases, and live migration workflows.

What is Eden?

Eden is a product family for operating production endpoints and AI workloads through one governed control plane:

• Gateway is the endpoint gateway and API runtime for databases, caches, services, tools, and model-provider endpoints.
• AI Orchestration is the governed AI product for LLM access, model routing, tool calling, and AI work against Gateway-managed endpoints.
• Live Migrations is the live migration product for planning, validation, replay, rollback, and staged cutover.

The products share organizations, identities, endpoint metadata, permissions, telemetry, and audit evidence. They can be adopted independently, then combined when a workload needs both governed traffic and a higher-level AI or migration workflow.

Who is Eden For?

Eden is for teams that operate production data, services, and AI systems and need one governed path between users, applications, agents, and those systems.

Platform, Security, and Identity Teams

Use Gateway to centralize endpoint onboarding, credentials, RBAC, private access, masking, policy, and audit evidence instead of distributing direct backend access to every client.

Application and Data Teams

Use Gateway when applications need approved, observable access to databases, APIs, caches, and tools through endpoints, templates, APIs, workflows, or native protocol gateways.

AI and Agent Teams

Use AI Orchestration when users or agents need to use models and call governed endpoint tools. AI Orchestration adds the LLM interface, model routing, tool calling, AI policy, and evidence on top of Gateway.

SRE, DevOps, and Database Teams

Use Gateway and Live Migrations when operating production traffic or moving live workloads. Eden supports controlled routing, observability, migration planning, validation, replay, rollback, and cutover.

Key Features

Governed Endpoint Runtime With Gateway

• Endpoint registry and routing for databases, caches, HTTP and SaaS services, tools, and model providers.
• Identity and policy enforcement with organization-scoped RBAC, endpoint-level security, private access, command policy, and audit context.
• Approved operation surfaces through templates, APIs, workflows, and native protocol interlays.
• Operational controls including endpoint masking, backend profiles, WireGuard-based private access, mirror mode, and telemetry.

Governed AI With AI Orchestration

• OpenAI-compatible model access with managed provider endpoints, route selection, budgets, cost attribution, and safe telemetry.
• AI over governed endpoints through tool discovery, tool calling, approved operations, and endpoint permissions.
• AI policy composition with LLM PII scanning, template-backed lookup, content profiles, deny boundaries, and promptless evidence.

Live Migration Workflows

• Migration planning for source and target endpoints, mappings, compatibility, and operational readiness.
• Controlled movement and replay for historical data, captured writes, validation, and staged traffic transitions.
• Production cutover controls with evidence, rollback readiness, operator workflows, and explicit commit decisions.

Shared Control Plane

• Organizations and identities for human users, agents, and external OIDC providers.
• REST APIs and client-facing gateways for endpoint operations, templates, workflows, migrations, and AI runtime controls.
• Telemetry and audit evidence for request routing, policy outcomes, endpoint performance, model use, and migration state.

See Products Overview for product boundaries and Capabilities By Product for the complete feature map.

Quick Example

Create an organization and connect to PostgreSQL:

# Create an organization (requires org creation token)
curl http://localhost:8000/api/v1/organizations \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer <EDEN_NEW_ORG_TOKEN>" \
  -d '{
    "id": "myorg",
    "super_admins": [{"username": "admin", "password": "password123"}]
  }'

# Login to get a JWT token
curl http://localhost:8000/api/v1/auth/login \
  -H "X-Org-Id: myorg" \
  -u admin:password123 \
  -X POST

# Connect a PostgreSQL endpoint (use JWT token from login)
curl http://localhost:8000/api/v1/endpoints \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer <JWT_TOKEN>" \
  -d '{
    "endpoint": "mydb",
    "kind": "Postgres",
    "config": {
      "write_conn": {"url": "postgresql://localhost/mydb"}
    }
  }'

Getting Started

Ready to dive in? Start with our Quick Start Guide or learn more about What is Eden.

If you are evaluating Eden as a product family, start with Products Overview. It explains how Gateway, AI Orchestration, and Live Migrations fit together before you move into setup guides and API references.

Community & Support

• Source code and issue tracking are hosted on GitHub.
• Open a GitHub issue for bugs and feature requests, or see the contributing guide to get involved.