Aperture is an AI gateway from Tailscale that centralizes provider credentials and access control for AI agents, replacing a separate credential per provider with one identity-based endpoint. Every AI call authenticates using Tailscale's network identity rather than a shared or distributed API key, and each call is logged with the identity of the caller, the model called, the provider, the timestamp, and the token count.
A policy is written once and applied across every environment and team, taking effect immediately without a redeployment, and it can set rate limits and spend caps and restrict which models an identity is allowed to call. Aperture works with coding agents such as Claude Code, Codex, and Gemini CLI, and with agent frameworks that support a custom base URL, connecting to self-hosted open-source models as well as hosted models from OpenAI, Anthropic, and Google.
Features
- Identity-based access: agents authenticate with Tailscale's network identity instead of distributed API keys
- Centralized provider inventory: one endpoint per provider, added or revoked through a configuration change
- Usage auditing: every request is logged with caller identity, model, provider, timestamp, and token count
- Unified policy: a single policy applies across development and production environments without redeployment
- Rate limits and spend caps: limits can be set per agent, team, or organization
- Model access control: policy determines which identities may call which models
- Agent and framework support: works with Claude Code, Codex, Gemini CLI, and frameworks that accept a custom base URL
