Show HN: Squidbrake – self-hosted approval gateway for AI agent tool calls

Category: security

Tags: ai-agents, approval-workflow, security, mcp, audit

Score: 7.5/10 (Innovation: 7, Technical: 8, Documentation: 8, Utility: 7)

Squidbrake is a self-hosted approval gateway that sits between AI agents and their tool calls, using deterministic rules to allow, hold for human approval, or block actions. It reads command semantics and tracks cross-conversation chains to catch risky sequences that per-call permissions miss, with a tamper-evident audit record. The project addresses a real gap in agent governance and is already used by multiple agent platforms.

Target audience: devops, security engineers, backend devs, platform teams

Repository: https://github.com/batrapulkit/squidbrake · Python · Apache-2.0 · 16 stars

View on Hacker News