Agentlock
Put a policy and approval gateway in front of agent tool execution so secrets stay vault-side and actions stay audited.
Overview
AgentLock is an MCP server for the Ship phase that enforces policy, approval, and audited execution for AI agents without sharing secrets.
What is this MCP server?
- Remote streamable-http MCP at app.agentlock.net with Bearer API token
- Security gateway: policy rules, approval flows, and audited agent execution
- Designed so agents do not receive shared secrets directly
- Version 0.2.0 from Olum289/agentlock on GitHub
- Hosted dashboard for creating AgentLock API credentials
- Server version 0.2.0
- 1 remote streamable-http endpoint at app.agentlock.net/api/mcp
- Bearer Authorization header required for MCP access
What problem does it solve?
Giving agents direct API keys and shell access is fast until one prompt injection or mistake leaks credentials or runs a destructive action.
Who is it for?
Indie builders promoting agent workflows from prototype to production who need approval gates and audit logs without building a custom security proxy.
Skip if: Static code-only projects with no agent tool use, or teams that already operate a full enterprise PAM stack integrated with every MCP tool.
What do I get? / Deliverables
After connecting AgentLock, agent tool calls flow through governed, auditable execution with secrets kept out of the model context.
- Policy-governed agent tool execution path
- Approval and audit records for sensitive actions
- Reduced secret exposure in agent prompts and local config
Recommended MCP Servers
Journey fit
How it compares
Hosted agent security gateway MCP, not a local lint skill or penetration-testing toolkit.
Common Questions / FAQ
Who is AgentLock for?
AgentLock is for developers deploying AI agents that invoke real tools and APIs who want policy, approvals, and audits without exposing secrets to the model.
When should I use AgentLock?
Use it in Ship when agents are about to touch production integrations and you need governed execution before or alongside launch.
How do I add AgentLock to my agent?
Create an API token in the AgentLock dashboard, add the remote MCP URL with Authorization Bearer header in your MCP client, then route sensitive tools through the gateway.