Stop AI agents from doing things they shouldn't. The action authorization layer — pre-execution, deterministic, policies included. Drop in. Day one.
The authorization kernel for AI agents. Block, allow, or escalate agent tool calls with YAML rules — deterministic-first, LLM fallback.
Deterministic execution authorization for AI agents and automation systems
Deterministic authorization + tamper-evident audit for AI agents, humans, and workloads — one principal type, safety invariants machine-checked by an SMT solver (cvc5), every decision independently verifiable offline. Pure Rust.
Authorization, delegation, provenance, and verifiable-audit engine for AI agents. MCP adapter published.
TrapDefense — Open-source AI Security Gateway for HTTP APIs and MCP tools. Inspect content, enforce agent permissions, and audit decisions.
Draco-Tech is the identity and authorization layer that lets autonomous agents operate with zero static credentials and full policy adherence.
Runtime guardrails for TypeScript AI agents. Prevents duplicate tool calls, enforces per-user cost budgets, and gates irreversible actions. MIT.
In-process permission enforcement for AI-agent delegation chains: a sub-agent never holds more than its parent's authority, with an offline-verifiable audit ledger. Python + TypeScript, adapters for 19 frameworks and the A2A protocol.
Attenu Derive: computes the permission set each AI agent task needs from the app itself — roster, tools, observed calls — for attenu-guard to enforce on every tool call and sub-agent handoff.
Attenu Guard for TypeScript — per-agent permissions on every tool call and sub-agent handoff (a sub-agent never holds more than its parent) with a hash-chained audit log verified offline; same bundle format as the Python library.
EVVM user validators using the ERC-8004 Identity Registry for agent authorization and whitelist management.
Watch AI agents get stopped. Runnable references for Ratify Protocol: a principal signs a bounded mandate, and the system carrying the consequence verifies it before acting.
pgauthz brings Google Zanzibar-style (ReBAC) authorization directly into PostgreSQL for multiple Agents workflows
An AI agent whose every action is authorized by a revocable credential and sealed into a tamper-evident log — and that reconciles actions taken offline on a credential revoked while it couldn't phone home. With a forensics view that shows the recomputed bytes, not just a verdict. A reference implementation on provenance-core.
Agent Authority is an open-source protocol and reference runtime for AI agent authorization, agent identity, delegated authority, scoped permissions, approvals, policy enforcement, and verifiable evidence.
Agent action authorization and signed audit control plane for Zero Trust infrastructure
Open-source runtime authorization and evidence controls for AI agents.
A free agent skill that checks a proposed agent action against an operator-written mandate and returns permit, deny or escalate with the governing clause, then records the decision in a hash-chained local log. Runs locally, no network, no credentials. Advisory: it checks and records, it cannot enforce.
OAuth-style delegated authorization for AI agents and MCP servers — scoped, revocable, short-lived tokens.
To associate your repository with the agent-authorization topic, visit your repo's landing page and select "manage topics."