A worker proves possession of its iroh identity and registers the endpoint.
The gate, not the data path
Find the right worker.
Prove you may connect.
Stockgate gives VGI workers stable names, live endpoint discovery, and short-lived attestations. Your SQL and Arrow data travel directly to the worker—not through Stockgate.
A stable Stockgate name resolves to a currently live endpoint.
An audience-bound, short-lived token authorizes the direct connection.
Use it from DuckDB
A name your query can carry
Attach a VGI service through its stable organization handle. Resolution and authorization happen before the direct connection.
ATTACH 'stockgate://o/acme/analytics' AS analytics (TYPE vgi);Self-certified records
Workers sign their own iroh address records. Stockgate never stores their private keys.
Audience-bound access
Attestations are short lived and bound to the service being reached.
Out of band
Stockgate handles identity and discovery—not SQL or query results.