Convoy AI
Benchmarks

The same agents, with and without a station.

The same agents and the same tasks, run with and without a governance layer in the path. Our own benchmark first, then the independent research behind it, each figure with its source.

What was compared

A station in the path, or not.

Our benchmark runs the same agents on the same tasks, with and without a station in the path. The independent research looks at two things a station does on every call: showing only the tools that fit, and scoping access.

Convoy benchmark · Sept. 2026

With and without Convoy

The same agents and the same tasks, run with a Convoy Station in the path and without governance.

  • Multi-step ordering scenarios: 5
  • Prompt-injection attempts: 5
  • Agents and models tested: [method details to publish]
  • Scenario definitions and scoring: [method details to publish]
RAG-MCP · arXiv 2505.03275

Filtered tools against the full list

How often an agent picks the right tool when its tools are filtered to the task, against the full unfiltered list. What a station does at each step: it shows only the tools that fit.

Read the paper (2025)
Teleport · 2026

Least privilege against broad permissions

How many organisations report an AI incident, depending on whether they grant AI least-privilege access or broad permissions. What a station does for each role: it scopes access.

State of AI in Enterprise Infrastructure Security (2026)

Results

Governed agents finish the job.

Each figure, the figure it is compared with, and where it comes from.

Our benchmark
5 / 5

Multi-step ordering scenarios completed as intended with Convoy, against 0 to 2 out of 5 without governance.

5 / 5With Convoy
0 to 2 / 5Without governance
Source: Convoy benchmark, Sept. 2026
5 / 5

Prompt-injection attempts blocked with Convoy in the path.

Source: Convoy benchmark, Sept. 2026
Independent research
43%

Of the time an agent picks the right tool when its tools are filtered to the task, against 13.6% with the full unfiltered list.

43%Tools filtered to the task
13.6%Full unfiltered list
Source: RAG-MCP, arXiv 2505.03275 (2025)
17%

Of organisations with least-privilege access report an AI incident, against 76% of those that grant broad permissions.

17%Least-privilege access
76%Broad permissions
Lower is better.Source: Teleport, State of AI in Enterprise Infrastructure Security (2026)

Docs

From your APIs to a station

Connect, build and expose, with the configuration that drives it: the skills, playbooks and policies a station runs on.

Open the docs

Get started

Put a station in your agents’ path.

Set up your first station on the APIs you already run, and measure the difference on your own tasks.