We’ve been building local and on-prem agent workflows for open-source LLMs. Engines like Ollama or vLLM ship with no auth, so every team ends up writing the same JWT proxy.

Attach Gateway is a single process that sits in front of any model server and handles the boring bits:

- verifies OIDC / DID JWTs - adds X-Attach-User and X-Attach-Session headers so downstream agents share the same identity - optional /a2a/tasks/send endpoint for Google-style A2A hand-offs - mirrors prompts + completions to Weaviate (runs in Docker)

One `pip install attach-dev`, export a token, run `attach-gateway`, and your local Ollama is protected in under 60 seconds.

Repo: https://github.com/attach-dev/attach-gateway PyPI: https://pypi.org/project/attach-dev/

Would love feedback – especially from teams doing multi-agent or on-prem work.