Agent Control
Agent Control is the open source control plane for AI agents, built to establish a new standard for governing agent behavior at scale. It solves the problem of scattered, hardcoded checks by giving teams a centralized governance layer with step-level enforcement that can be managed from a single control plane and updated in real time without touching agent code. Developers can make any function governable by adding the control() decorator, turning meaningful decision points inside an agent into independently governed control points with their own policies. When a decorated function executes, Agent Control evaluates the input or output against the active policy and returns a decision: deny, steer, warn, log, or allow. If the decision is denied, the SDK raises a ControlViolationError before the unsafe action can proceed. Policies are decoupled from code, so developers decide where to place control hooks while policy teams decide what those hooks enforce.
Learn more
Preloop
Preloop is the open source AI agent control plane for agents that take real actions. It combines an MCP firewall for tool access, an AI model gateway for cost, safety, and attribution, policy-as-code with human approvals, runtime session observability, and audit trails in a single self-hostable platform. AI agents can deploy code, change infrastructure, move money, touch production data, and burn model spend in seconds, so Preloop helps teams control what agents can do, how much they spend, and which actions require human approval. It works with OpenClaw, Hermes, Claude Code, Codex CLI, Cursor, Gemini CLI, Windsurf, Cline, OpenCode, and any MCP-compatible agent or managed runtime. Access rules can inspect arguments and context, not just tool names, with CEL expressions for fine-grained conditions. Teams can start with observability, then layer in approvals and deny rules without SDKs or invasive app changes.
Learn more
Pushary
Pushary sends a push to your phone when your AI agents need you. Claude Code, Codex, Cursor, and other agents pause for approval on risky actions like shell commands, file writes, and deploys. Pushary turns each pause into a notification you approve or deny from your lock screen, so your agents keep working while you are away from your desk.
Set permission policies per tool: auto-approve safe actions, require approval for risky ones, and keep a full audit log of every question and answer. Run a whole fleet of agents and track them in one place.
Pushary also powers push notifications for e-commerce and SaaS: subscriber capture, campaigns, automation flows, templates, and analytics.
Connect any agent through a simple CLI or MCP. Native iOS and Android apps included.
Learn more
Barndoor.ai
Barndoor is a data and access management layer designed to secure how artificial intelligence systems interact with enterprise data and infrastructure. It acts as a centralized control plane that governs AI agents and applications, allowing organizations to define policies, enforce access rules automatically, and maintain full visibility over how AI tools operate across business systems. Instead of relying only on traditional identity-based permissions, Barndoor introduces context-aware governance, enabling administrators to control what actions an AI agent can perform based on factors such as the user operating the agent, the system being accessed, the type of data involved, and the specific task being attempted. It evaluates every AI request in real time and enforces policies before an action is executed, preventing unsafe or unauthorized operations from reaching internal systems or modifying sensitive information.
Learn more