Node9 Proxy

node9 is an access control layer for AI agents. It sits in front of every tool call an agent makes and decides whether to allow it, hold it for human review, or block it, with every decision recorded in an audit log. It works with Claude Code, Codex, Cursor, Copilot CLI and other agents, and the vendor states that it governs twelve of them. Policy controls include a credential jail that blocks reads of locations such as ~/.ssh, ~/.aws and .env files, data loss prevention that catches secrets and personal data in tool calls before they leave, an egress allowlist for outbound traffic, SSRF protection against cloud metadata and link local addresses, canary credentials, destructive git protection, and pinning of MCP tool definitions so a server that changes its tools is held. Risky actions can wait for approval in Slack or on a phone. Free scans check a public repository, or the local machine, for what an agent could reach or run. It is aimed at developers and teams that run coding agents locally, in CI and in the cloud and need to govern them from one place. The command line tool is open source and installs with npm. The Free plan costs $0 and covers one person on their own machine. The Team plan is $29 per month with a shared dashboard, approval routing and 90 day audit logs. The Business plan is $99 per month.