TAG
Trust grades, capability lockfiles, and signed evidence for the AI tool supply chain. Scan any MCP server or API before your agent connects. Paid by nobody we scan.
The execution safety layer for AI agents.
Open evidence profile for MCP tool actions. Enforce configured tool-call policies and record decisions and observations in offline-verifiable bundles. Optional Linux kernel controls. No hosted backend required.
pod — least-privilege compiler for AI agents. Compile a least-privilege policy from what your agent actually did, then prove what happened.
Local-first verification layer for AI agents: evidence, provenance, policy gates, human approval, and auditable Trust Receipts before a claim, memory write, or action is trusted.
It sees the page, and it acts. Drive a real, already logged-in browser from the CLI or over MCP, with an enforceable approval gate. Chromium via CDP, Firefox via WebDriver BiDi.
One endpoint in front of your MCP servers and REST APIs. The agent sees a small fixed meta-tool surface and finds tools on demand. Also an MCP compatibility layer: clients and servers on different MCP revisions (2024-11-05 to 2026-07-28) work together through it. Single Rust bina
Open standard for verifiable AI agent identity and authority. One signed JSON file at /.well-known/agent-passport.json, keyed in DNS. Verifier, spend caps, signed receipts, CLI and MCP server. MIT.
A containment layer for AI agents that go rogue. Guard mode wraps any stdio MCP server: calls to tools you mark as risky wait for a person, the agent can't approve its own hold, and claimed accounts get Ed25519-signed records you verify offline. Covers the servers you wrap. MIT c
The local security layer for coding agents. Use Claude Code, Codex, Cursor, OpenCode or Hermes without exposing your secrets, your data or your systems. Open source, MIT, nothing leaves your machine.
An agent said it updated 1 row. Postgres changed 301. Deedglass checks what AI agents really did, enforces your rules, keeps signed records and has undo.
A security-focused Model Context Protocol server for GnuPG: sign, verify, encrypt, decrypt and manage keys without exposing private key material to the agent.
