Capability reference
Search the commands, controls, evidence, and licensed features recorded in the product manifest.
26 capabilities in the full inventory
Mediate and inspect
Traffic mediation and protocol-specific inspection. Qualifiers state where Pipelock can see and enforce.
6 surfacesnetwork-mediation
Mediates agent traffic and applies URL, DLP, injection, and SSRF controls.
pipelock runApplies only to traffic routed through Pipelock; direct agent egress needs containment or network policy.
mcp-proxy-scanning
Scans MCP traffic and applies configured tool, chain, and session controls.
pipelock mcp proxyApplies only to MCP transports that run through the Pipelock proxy.
rule-bundles
Loads signed rule bundles and applies their configured detection coverage.
rulestls-interception
Decrypts configured CONNECT tunnels so Pipelock can inspect HTTP bodies and headers.
tls_interceptionRequires a configured local CA that the intercepted client trusts; passthrough traffic remains encrypted and cannot be body-scanned.
a2a-scanning
Scans Agent-to-Agent messages and Agent Cards for poisoning, drift, and session smuggling.
a2a_scanningApplies to A2A traffic carried on Pipelock's supported forward-proxy and MCP HTTP paths.
browser-shield
Rewrites proxied HTML and JavaScript to remove configured browser traps and tracking code.
browser_shieldApplies only to supported browser response traffic that flows through Pipelock.
Contain and enforce
Host controls and runtime policy that stop or escalate risky activity.
5 surfacesagent-containment
Installs, verifies, and rolls back nftables-backed host containment.
pipelock containKernel-enforced containment requires Linux, nftables, and the managed identities; other targets cannot provide this containment path.
single-agent-sandbox
Runs one command with unprivileged process and filesystem restrictions.
pipelock sandboxKernel isolation requires Linux user namespaces. Without them, best-effort network isolation only sets HTTP(S)_PROXY; seccomp adds restrictions only on linux/amd64.
global-canary-tokens
Detects configured synthetic secrets without a license gate.
canary_tokensemergency-kill-switch
Denies mediated traffic when any configured, local, or fleet kill source is active.
kill_switchadaptive-enforcement
Escalates a risky session's enforcement level from accumulated security signals.
adaptive_enforcementRecord and explain
Receipts, explanations, diagnostics, and operator records you can inspect after a decision.
8 surfacessigned-action-receipts
Writes signed, hash-chained mediation evidence and verifies it offline.
flight_recorderoperator-dashboard
Serves authenticated evidence and operator views from local receipt data.
pipelock dashboard servecoverage-certificates
Generates a signed receipt-coverage certificate for one agent.
pipelock dashboard coverage-cert generateexemption-lifecycle-records
Lists and manages exemption records used by the operator dashboard.
pipelock dashboard exemption listlegal-hold-metadata
Lists and manages legal-hold metadata outside dashboard HTTP authority.
pipelock dashboard legal-hold listoffline-receipt-verification
Verifies signed action receipts and receipt chains without contacting a Pipelock server.
pipelock verify-receiptverdict-explanations
Explains a URL, command, tool, or file verdict and names the configuration that controls it.
pipelock explaindeployment-diagnostics
Reports whether configured protections can enforce in the current host and network topology.
pipelock doctorAssess and coordinate
Named-agent, assessment, and fleet features add licensed control above the free engine.
7 surfacesnamed-agent-profiles
Applies separate listeners and policy profiles for named agents.
agents.<profile>per-agent-sandbox-overrides
Overrides sandbox settings for a named agent profile.
agents.<profile>.sandboxper-agent-address-allowlists
Adds a named agent's address allowlist to the global baseline.
agents.<profile>.allowed_addressesassessment-artifacts
Produces the full assessment report, attestation, and badge artifacts.
pipelock assess finalizeconductor-fleet-coordination
Coordinates signed policy distribution and fleet audit ingestion.
pipelock conductor servefleet-audit-sink
Receives signed Conductor audit batches on a dedicated listener.
pipelock fleet-sinkfleet-receipt-reports
Mints a signed report from Conductor audit evidence for offline verification.
pipelock conductor fleet reportNo capability matches that search and tier.
Put it to work
Community includes the scanner, MCP proxy, receipts, containment, and one default profile. Pro adds named profiles and operator controls.