agentguard-cli
v1.4.0
Published
Reverse proxy firewall + LLM Gateway for AI agents
Maintainers
Readme
AgentGuard
Reverse Proxy Firewall + LLM Gateway for AI Agents
AgentGuard is a security layer for local autonomous AI agents. It provides inbound request filtering, LLM tool call interception, and outbound PII sanitization — all in a single Go binary with zero dependencies.
Install
npm install -g agentguard-cli
agentguard setupOr run directly:
npx agentguard-cli setupFeatures
- Two-Stage Defense — 11-layer rule-based checks + optional remote trust evaluation
- LLM Gateway — Multi-provider (OpenAI + Anthropic) tool call interception with SSE streaming support
- PII Sanitization — Regex + entropy-based detection of emails, tokens, secrets in outbound requests
- Safe Auto-Setup — One command configures shell RC + OpenClaw, clean undo with
--undo - CVE-2026-25253 Mitigation — Blocks malicious gateway URLs, sandbox escapes, dangerous commands
Usage
# Start with defaults (inbound proxy only)
agentguard
# Enable LLM Gateway (monitor mode)
AGENTGUARD_LLM_ENABLED=true agentguard
# Enable LLM Gateway in enforce mode
AGENTGUARD_LLM_ENABLED=true AGENTGUARD_LLM_MODE=enforce agentguardConfiguration
| Variable | Default | Description |
|----------|---------|-------------|
| AGENTGUARD_PORT | :10180 | Reverse proxy listen port |
| AGENTGUARD_LLM_ENABLED | false | Enable LLM Gateway |
| AGENTGUARD_LLM_PORT | :10081 | LLM Gateway listen port |
| AGENTGUARD_LLM_MODE | monitor | monitor or enforce |
| AGENTGUARD_LLM_PII | false | Enable PII sanitization |
| AGENTGUARD_GATE_ENABLED | true | Enable Stage 2 evaluation |
Supported Platforms
- macOS (Apple Silicon / Intel)
- Linux (x64)
- Windows (x64)
The npm postinstall script automatically downloads the correct binary from GitHub Releases.
Links
License
MIT
