Plugin for Claude Code, Codex and ChatGPT Work
Signed tool decisions, matter budgets and session tool policies at the hook boundary. Free shadow mode, licensed enforcement. Install · How it works
Set the tool policy. Keep the signed record.
AgentGuard checks supported tool calls against your policy and records decisions and outcomes locally, with free shadow mode and licensed enforcement.
A real session on Sep 19 2026. Sixteen spawns in fifteen active minutes. Recorded with a prepared session; the decision is real.
Pick your path
Section titled “Pick your path”Burn
Where a session’s tokens went, the pace of a long session, and a local circuit breaker for runaway agents. Free, local, nothing leaves the machine. Read
Spend SDK
Wrap your provider client, set a cap, block before the provider is called, keep an Ed25519-signed hash-chained log. Quickstart
Security
Zero data plane. Prompts, keys and completions never pass through AgentGuard. Boundary
How a tool call is decided
Section titled “How a tool call is decided”flowchart LR
H[Host hook] --> P[Your policy]
P --> D{Decision}
D -->|allow| T[Tool runs]
D -->|deny| X[Blocked, with a reason]
T --> R[(Signed record you hold)]
X --> R
Policy file referenceEvery field, every default, one worked example.
Records and verificationWhat the chain contains and how anyone verifies it with the public key.
PricingFree, Solo, Team. 14-day Enforce trial by email, no card.