{"repo":"flankerhqd/cyvisguard","free":true,"listed":false,"github":"https://github.com/flankerhqd/cyvisguard","clone":"git clone https://github.com/flankerhqd/cyvisguard.git","description":"Security control plane for AI agents — identity and delegation, capability policy, data-flow taint and a live audit trail, enforced over MCP. Guards a real Claude Code end to end.","language":"TypeScript","stars":55,"topics":["agent-security","ai-agents","ai-security","claude-code","llm-security","mcp","model-context-protocol","prompt-injection","zero-trust"],"license":"Apache-2.0","category":"mcp-servers","readme_excerpt":"CyVisGuard English 中文 An open-source, self-contained security control plane for AI agents . It sits between an agent — anything that holds credentials and calls tools on someone's behalf — and everything it can reach, and on every action answers: who is calling, on behalf of whom, and is this still within what they're allowed to do? Agents are becoming the identity that actually touches production: they read tickets, query warehouses, call internal APIs, and act on content nobody reviewed. The interesting controls are no longer at the model, they're at the action — identity and delegation, capability policy, data-flow taint, and an audit trail you can replay. CyVisGuard enforces those over MCP , so they apply to any agent that speaks it. Coding agents are the sharpest version of the problem — full filesystem, shell, network, sub-agents, and untrusted repo content in the same context — so they're the reference integration. Point it at a real Claude Code and it guards every tool call, refuses a prompt-injected exfiltration, catches a poisoned CLAUDE.md or skill, and even refuses a settings change that would remove the guard itself — all streamed to a live audit console. Every row is a real GuardedSession call and every verdict comes from the real policy engine — token exchange, taint tracking, arbitration, circuit-break. The capture is reload-paced, not a real-time recording. Clicking a row opens the request and response the guard actually saw: Not demo-ware. What's live vs. sc","default_branch":null,"files":null,"tree":[],"storefront":"/r/flankerhqd","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/flankerhqd/cyvisguard/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}