The Flight Recorder
for AI Agents.
An open-source SIEM and MCP audit proxy. Intercept, audit, and block unauthorized tool executions — before they touch your infrastructure.
$ npx agentmetry initEndpoint security, adapted for autonomous agents.
One lightweight daemon between your agent and its tools. Zero cloud dependency. Telemetry stays local.
MCP Audit Proxy
Secure any Model Context Protocol server. Agentmetry sits between agent and tool — every call is inspected before it executes.
MITRE ATT&CK Tagging
Automatically maps agent behavior to adversarial tactics. Every bash call and tool invocation gets a TTP label your SOC already speaks.
Local DLP
Runs on-box. Prevents agents from reading .env files, SSH keys, or proprietary source — and blocks exfiltration to untrusted endpoints.
Three stages. Sub-millisecond overhead.
Intercept
Native bash commands and MCP tool calls are routed through the local audit proxy.
Classify
Each event is parsed, matched to MITRE ATT&CK TTPs, and scanned by the local DLP engine.
Enforce
Allow, warn, or block in-line. Every decision is recorded to the local SIEM stream.
Trusted across the open-source security ecosystem.
Ship agents you can actually audit.
Free. Open source. MIT licensed. Runs on your machine, not ours.