security

Kotro is a local control plane for coding agents that governs MCP tool actions and LLM traffic with one binary. The page shows install options, supported clients, dashboard access, and concrete controls like schema pinning, redaction, cache, budget, and circuit breaker behavior.

An open-source agent-driven package manager for versioned, checksummed, approval-gated tasks run through Claude Code, Codex, Gemini CLI, OpenCode, or Antigravity.

Hotcell is a self-hostable sandbox SDK for AI agents that runs isolated sandboxes on local hardware or servers. The page shows setup, CLI commands, key handling, egress control, and support for containers or microVMs.

A local Rust-plus-Python middleware layer for LLM apps that claims to reduce token usage and add in-process security checks before prompts are sent to a provider.

A loopback HTTPS proxy that swaps placeholders for real API keys at request time, keeping secrets out of the agent process. It uses Bitwarden Secrets Manager and supports scoped bindings for hosts, methods, and paths.

Runtime authorization platform for AI agents with open-source SDKs in Python, TypeScript, Go, Java, and Rust. The page says the hosted service is in production, supports per-action checks, scoped delegation, revocable tokens, and a shared authorization model across MCP tools, agent-to-agent calls, and direct API integr

A minimal native macOS sandbox for running Claude Code or Codex with OS-enforced limits on what the agent can touch.

An open-source reference implementation for autonomous vulnerability discovery and remediation with Claude. It includes Claude Code skills for threat modeling, scanning, triage, patching, plus a harness for running a recon → find → verify → report → patch pipeline.

Open-source security scanner and firewall for MCP servers. It scans configs for common MCP risks, enforces runtime policies on tool calls, and produces audit logs, with CLI commands, policy examples, and a programmatic API.

A secure Model Context Protocol server that gives AI assistants controlled terminal access with risk analysis, sandboxing, logging, filesystem protection, and optional Docker and Git features.

An interactive lab for tracing how AI-assisted engineering workflows can reach repos, CI/CD, credentials, tools, approvals, and proof trails.

Runtime governance and containment for AI agents. Faramesh sits between an agent and its tools to enforce policy checks, approval steps, credential isolation, and tamper-evident audit logs before risky actions execute.

A security product for Claude Code that reviews application architecture inside the IDE via MCP, with contextual assessments, prioritized mitigations, and continuous re-checks as the codebase changes.

Open-source MCP proxy that blocks agent send/share actions when the destination first appears in untrusted tool output. It uses deterministic rules rather than an LLM and logs every allow/deny decision.

Repository of agent skills for detecting and patching known CVEs in PHP, Node.js, and GitLab environments, with installation instructions and support across multiple coding agents.

A local LLM gateway that redacts secrets before requests reach model providers and restores them locally afterward. It is aimed at agent workflows where prompts and tool calls may contain real credentials.

HEIDES is a deterministic local harness for AI coding agents that maps a codebase, grounds plans against the current graph, and checks proposed patches for conflicts, edge cases, and security issues before changes land.

Sentrint is a security scanner for apps built with LLM platforms like Bolt, Cursor, and v0. It scans repos for secrets, access rules, vulnerable dependencies, and risky code paths, then returns plain-English findings and a copy-paste fix prompt.

A lightweight shell-based guard that blocks destructive commands before an AI coding agent can run them. It targets risky actions like git reset --hard, rm -rf, force-pushes, and destructive cloud/database commands, with local regex rules and a test script.

A CLI for running untrusted MCP servers in sandboxed containers with deny-by-default egress, traffic watching, and host approval workflows. It can also compose servers into agents and expose them over OCI registries.

A harness that runs MCP servers in a disposable Linux sandbox and logs their real startup behavior, including file access and outbound network connections.

An open-source AI agent platform for production workflows, with isolated containers, credential proxying, and support for 100+ business and productivity integrations.

VaultS3 is a self-hosted, S3-compatible object storage server with a built-in dashboard, low RAM usage, and a single-binary deployment. The page highlights features like versioning, WORM, S3 Select, FUSE mount, IAM/OIDC login, search, and event notifications.

A Mac-resident MCP server that lets AI agents access Apple services like Mail, Calendar, iCloud Drive, Voice Memos, Reminders, and Contacts over a Tailscale network with per-token ACLs and audit logging.