Prismor: self-hosted runtime control plane for coding agents
At a glance
OSS hooks intercept tool calls before execution across ~14 coding agents; observe/enforce policy, secret cloaking, MCP/skill scan, egress allowlists, and a local dashboard. This workflow is listed under agent-governance, pretooluse-hooks, mcp-security, hitl, supply-chain.
Agents / tools
Prismor, Claude Code, Cursor, Codex, Windsurf, OpenClaw, Hermes
Ledger’s Agent Intent queue lets background agents (Grok Bot, Muse, Hermes, OpenClaw, Dots) prepare actions—e.g. Grok Bot watches an inbox and drafts an invoice payment—while you review asynchronously and physically confirm on a Ledger signer Secure Screen. Agents never hold signing keys; coding agents can use Agent Stack CLI/skills too.
Marc Lou’s MailCheap exposes Streamable HTTP MCP at https://mailcheap.ai/mcp so ChatGPT, Claude and Grok Bot connect with OAuth (no key to copy); Claude Code, Codex and Cursor use a bearer API key. Agents can draft campaigns, send tests, schedule issues and read stats; schedule/send tools are marked destructive and ask before sending. Open-source / self-host option; pay only for SES-style sends vs beehiiv-class plans.
MIT Go daemon + git hook reviews every commit with the CLIs you already pay for—Codex, Claude Code, Cursor, OpenCode, and first-class Grok Build (grok / grok-build). Findings stay in a ledger until closed; agent hooks push open review IDs back into the session for /roborev-fix before context goes cold. Reviews stay on your machine.
Show HN (Oct 17): RugSnare pins each MCP tool's {name, description, inputSchema} by canonicalized SHA-256 at install, then diffs upgrades across 24 popular servers (~3.6M weekly installs)—336 contract changes found; grades BREAKING/LOOSENED/EXPANDED/NOTATION/COSMETIC and exits 1 for CI. Apache-2.0, zero npm deps; OWASP MCP Security Cheat Sheet now recommends contract pinning.