Pipelock

Pipelock is an open source agent firewall from PipeLab that sits at the boundary between an AI agent and the outside world. It mediates MCP, HTTP and WebSocket traffic, wraps stdio MCP servers, and can issue signed action receipts that a third party can verify offline when receipt signing is configured. It is written in Go and ships as a single binary. Detection covers data loss prevention patterns for keys, tokens and personal data, prompt injection across encoding chains, MCP tool poisoning, and blocking of SSRF, private address and cloud metadata access. Enforcement includes a kill switch, human approvals, MCP tool policy, and kernel level egress containment, with process sandboxing on Linux and macOS. Canary tokens reveal when a planted secret moves. Output includes Ed25519 signed decision receipts, evidence viewers and signed audit reports, with Prometheus and OTLP support. Setup commands exist for protecting Claude Code. The product is aimed at security and platform teams running agents that touch real credentials and systems. The Community edition is free, with an Apache 2.0 core and one default security profile. Pro adds named profiles with separate policies, budgets and audit trails; the founding price is $49 per month against a list price of $99 per month for early customers. An annual fleet license costs $25,000 per year, with a $5,000 evaluation and a separate $999 per year Assess license for deployment reports.