v3.5.0 · fail-closed defaults + signed self-update CNCF Landscape · Security & Compliance

Open-source agent firewall for MCP and AI agent egress

Pipelock mediates MCP, HTTP, and WebSocket traffic at the agent boundary, wraps stdio MCP servers, and emits signed action receipts any third party can verify offline when receipt signing is configured.

Install Pipelock Inspect the proof

install

New to the category? What an agent firewall does and where its boundary stops.

Browse 27 demo receipts

Allowed: a safe read passes, receipt 1, session anchor Allowed: a safe read passes, receipt 2, allow Blocked: secret exfiltration over a URL, receipt 1, session anchor Blocked: secret exfiltration over a URL, receipt 2, block Blocked: a hijack hidden in fetched content, receipt 1, session anchor Blocked: a hijack hidden in fetched content, receipt 2, block Blocked: a reach for cloud metadata, receipt 1, session anchor Blocked: a reach for cloud metadata, receipt 2, block Blocked: destructive API mutation, receipt 1, session anchor Blocked: destructive API mutation, receipt 2, allow Blocked: destructive API mutation, receipt 3, block Blocked: poisoned ticket webhook exfiltration, receipt 1, session anchor Blocked: poisoned ticket webhook exfiltration, receipt 2, block Blocked: poisoned README key paste, receipt 1, session anchor Blocked: poisoned README key paste, receipt 2, block Blocked: hostile page session key exfiltration, receipt 1, session anchor Blocked: hostile page session key exfiltration, receipt 2, block Warned: suspicious payload observed, receipt 1, session anchor Warned: suspicious payload observed, receipt 2, warn Blocked: a secret split across WebSocket frames, receipt 1, session anchor Blocked: a secret split across WebSocket frames, receipt 2, block Blocked: poisoned MCP tool instructions, receipt 1, session anchor Blocked: poisoned MCP tool instructions, receipt 2, block Chain: two safe actions, then a blocked write, receipt 1, session anchor Chain: two safe actions, then a blocked write, receipt 2, allow Chain: two safe actions, then a blocked write, receipt 3, allow Chain: two safe actions, then a blocked write, receipt 4, block

Live replay · no account · fake secret

Watch an agent try to leak a secret. Watch the firewall stop it.

Step through one real recorded run below, then verify the signed decision yourself, offline.

Protect your agent free Open the full playground

Trending on BuildHop