Bifrost Integration

Connect your Bifrost AI gateway to Capsule Security for real-time policy enforcement and audit of every LLM request and every outbound MCP tool call - before the provider or upstream server executes it.

This integration uses a Go plugin that Bifrost loads at startup. Before each LLM request is forwarded to the model provider, and before each MCP tool call is forwarded to the upstream server, the plugin synchronously posts the request to your Capsule tenant and blocks on an allow/deny verdict. After the call settles, it fires fire-and-forget telemetry.

Bifrost is operator-deployed - you run the gateway in your own infrastructure, so there is no SaaS install. The only thing exchanged at install time is a signed JWT that scopes the plugin to your tenant and environment.

The following hooks are configured:

Administrative LLM calls that carry no model (list models, file and batch management) pass through without review.

Before you begin, ensure you have:

• A running Bifrost gateway (Go 1.22 or later)
• The same Go toolchain and bifrost/core source version used to build your Bifrost binary
• A Capsule Security account with admin access
• Network access from your Bifrost gateway to your Capsule agentsecurity endpoint (e.g. https://agents.capsule.security)

1. Log in to the Capsule Security portal.

2. Navigate to Integrations and locate Bifrost.

3. Click Install - Capsule generates a JWT scoped to your tenant and Bifrost environment. Treat it as a secret.

4. Copy the generated endpoint and token. You will reference them in the plugin configuration in the next steps.

Go plugins are ABI-coupled to the Bifrost binary that loads them. The plugin must be compiled with the same Go toolchain version and against the same bifrost/core source as your Bifrost deployment.

git clone https://github.com/capsulesecurity/capsule.git
cd capsule/plugins/bifrost-plugin
make tidy   # resolve dependencies against your pinned bifrost/core version
make build  # outputs build/capsule.so

If your Bifrost deployment tracks a different bifrost/core tag than the one pinned in go.mod, update the require line before running make tidy.

Reference the built plugin in your Bifrost config.yaml:

plugins:
  - name: capsule
    path: ./build/capsule.so
    config:
      endpoint: "https://agents.capsule.security/v1/bifrost/hooks"
      token: "${CAPSULE_BIFROST_TOKEN}"

The token field supports environment variable interpolation - keep the raw JWT out of version control.

Never commit the JWT to version control. Recommended approaches:

• Pass the token as an environment variable (CAPSULE_BIFROST_TOKEN) and use interpolation in config.yaml
• Source it from your secret manager (1Password, AWS Secrets Manager, HashiCorp Vault) at gateway startup
• Deliver it through the same channel that distributes the rest of your Bifrost deployment configuration

Restart the gateway to load the plugin:

bifrost --config config.yaml

Bifrost logs registered plugins on startup. Confirm the capsule plugin appears in the output.

1. Send a chat completion (or any model request) through the gateway, and trigger an MCP tool call if you use the MCP gateway.

2. Log in to the Capsule Security portal.

3. Navigate to Inventory > Agents and confirm a Bifrost agent appears for each model (Bifrost LLM/<provider>/<model>) and each MCP server (Bifrost MCP/<server>) that handled traffic.

4. Click the agent and review the audit logs to verify pre-call and post-call events are captured.

If events are not appearing:

1. Verify the endpoint is reachable from the gateway host:

   curl -sS -o /dev/null -w "%{http_code}\n" https://agents.capsule.security/v1/bifrost/hooks/events/llm/pre

2. Verify the JWT is valid - a 401 response from the endpoint means the token is missing, expired, or scoped to a different environment.

3. Check for timeouts - if your network has high latency to the Capsule endpoint, increase timeout_ms or confirm fail_open is set appropriately.

4. Confirm the plugin is loaded - Bifrost logs registered plugins on startup; the Capsule plugin registers as capsule.

5. Contact Capsule Security support if issues persist.

The Capsule plugin runs in-process inside the Bifrost gateway and observes every LLM request and every outbound tool call, including prompt text. Before deploying:

1. Protect the JWT - anyone with the token can post events on behalf of your tenant. Rotate it through the portal if it is exposed.
2. Choose fail_open deliberately - true (the default) prioritizes availability and lets LLM requests and tool calls through when Capsule is unreachable; false prioritizes policy enforcement and blocks them when Capsule cannot be reached.
3. ABI-pin the plugin - rebuild capsule.so whenever you upgrade Bifrost to avoid loader panics from Go plugin ABI mismatches.
4. Use TLS-only endpoints. The plugin sends a Bearer token on every request - never configure an http:// endpoint outside local development.

For help with this integration:

• Email: support@capsule.security
• Include: Your organization ID, integration status, plugin version (git rev-parse HEAD in the bifrost-plugin directory), and any error messages

• Bifrost AI Gateway
• Bifrost Plugin Configuration