AgentControl

Open-source runtime control plane for AI coding agents

Think "cloud firewall for AI agents." AgentControl sits between your agent and its tools — intercepting every tool call, enforcing policy, requiring human approval for risky operations, and logging everything.

┌─────────────────────────────────────────────────────────┐
│ AgentControl Dashboard                                   │
│ ┌─────────────────────────────────────────────────────┐ │
│ │ Agents  │  ON  │  Name       │  Risk  │  Actions   │ │
│ ├─────────────────────────────────────────────────────┤ │
│ │ ◉ ON   │  repo-mnt  │  Repo Bot  │  HIGH  │ [⏸] [🗑] │ │
│ │ ◯ OFF  │  safe-bot  │  Safe Bot  │  LOW   │ [▶] [🗑] │ │
│ └─────────────────────────────────────────────────────┘ │
│ Policy: block rm -rf, require_approval for PR merges     │
│ Audit: 47 tool calls logged, 12 blocked, 3 approvals     │
└─────────────────────────────────────────────────────────┘

Record a live demo:npm install -g terminalizer && terminalizer record demo

npm install
cp .env.example .env
npm run dev

Open ** http://localhost:8080** — the dashboard is live. That's it.

Policy Engine— YAML-defined rules that decideallow

,block

, orrequire_approval

per tool callAgent Registry— Register agents with identities, allowed tools, and risk levels** Human-in-the-Loop**— Approve or deny risky tool calls from the dashboard or API** Audit Timeline**— Complete replay of every tool call, decision, and approval** Dashboard UI**— Single-page HTML app: monitor agents, approve calls, view audit logs** CLI**— Full command-line interface for scripting and automation** API Key Management**— Create and revoke scoped API keys via the dashboard or CLI** Risk Levels**—low

/medium

/high

/critical

— each enforces different policiesEnable/Disable Agents— Stop or start agents without deleting them** Docker**— One-command deploy withdocker compose up -d

Self-Hosted— Your data stays on your infrastructure. No cloud dependency.

┌──────────┐     ┌──────────────────────────────────────────┐     ┌──────────┐
│  Agent   │────▶│            AgentControl Gateway           │────▶│  Tools   │
│ (LLM)    │     │                                          │     │ (shell,  │
└──────────┘     │  ┌──────────┐  ┌──────────┐  ┌────────┐ │     │  files,  │
                 │  │  Policy  │──│ Approval │──│  Audit │ │     │  github) │
                 │  │  Engine  │  │   Queue  │  │  Log   │ │     └──────────┘
                 │  └──────────┘  └──────────┘  └────────┘ │
                 │       │              │              │     │
                 │       ▼              ▼              ▼     │
                 │  ┌──────────────────────────────────────┐ │
                 │  │            Agent Registry             │ │
                 │  │  (SQLite: agents, policies, runs)     │ │
                 │  └──────────────────────────────────────┘ │
                 └──────────────────────────────────────────┘

Every tool call passes through the gateway:

Policy Engine evaluates the call against YAML rules and risk levelApproval Queue holds calls that need human reviewAudit Log records the full decision + execution trace

npm run cli -- agent register \
  --id repo-maintainer \
  --name "Repo Maintainer" \
  --owner engineering \
  --environment development \
  --purpose "Safely maintain repository tasks" \
  --tools shell.run,filesystem.read,filesystem.write,github.mock_merge_pr \
  --risk medium

npm run cli -- tools call --agent repo-maintainer --tool shell.run --input '{"command":"npm test"}'

npm run cli -- tools call --agent repo-maintainer --tool shell.run --input '{"command":"rm -rf /"}'

npm run cli -- tools call --agent repo-maintainer --tool github.mock_merge_pr --input '{"repo":"company/api","pr":42}'

npm run cli -- approvals list
npm run cli -- approvals approve <id> --by secops-admin --reason "Verified"

npm run cli -- agent toggle --id repo-maintainer --disable
npm run cli -- agent toggle --id repo-maintainer --enable

npm run cli -- runs replay <run-id>

npm run cli -- agent delete --id repo-maintainer

npm run cli -- keys create --name "My Key"
npm run cli -- keys list
npm run cli -- keys delete <key-id>

Windows PowerShell:Replace single quotes with escaped double quotes:

--input "{""command"":""npm test""}"

All endpoints require x-api-key

header or Authorization: Bearer <key>

.

export API_KEY=your-secure-key
docker compose up -d
npm test

Runs 18 tests across core engine, HTTP API, and CLI end-to-end flow.

examples/langchain.mdexamples/crewai.mdCopy .env.example

to .env

and set your API_KEY

. See .env

for all available options.

PRs welcome! Check open issues for community-requested features.

MIT