Let your AI agent read the web. Stop it before it logs in, signs up or posts.

from agent_egress_guard import Guard

guard = Guard()
v = guard.check("https://example.com/wp-login.php", "POST")
print(v.decision, v.layer, v.rule)      # deny rules login

import requests
from agent_egress_guard import guard_requests, EgressDenied

session = guard_requests(requests.Session())
try:
    session.post("https://example.com/login", data={"user": "agent"})
except EgressDenied as e:
    print("blocked:", e.verdict.rule)

import httpx
from agent_egress_guard import httpx_hook

client = httpx.Client(event_hooks={"request": [httpx_hook()]})

from playwright.sync_api import sync_playwright
from agent_egress_guard import guard_playwright

with sync_playwright() as p:
    browser = p.chromium.launch()
    context = browser.new_context()
    guard_playwright(context)          # denied requests are aborted
    page = context.new_page()
    page.goto("https://example.com/")

pip install mitmproxy
mitmdump -s "$(agent-egress-guard mitm-script)"
# point the agent or container at the proxy: denied requests get a 403 with the verdict as JSON

agent-egress-guard policy init --agent vendor-research --owner procurement-lead --tier 3 > vendor-research.json
agent-egress-guard policy validate vendor-research.json
agent-egress-guard policy check vendor-research.json https://example.com/login -X POST
# APPROVAL_REQUIRED  rule: login  (tier 3 agents route denials to their owner)

from agent_egress_guard import Guard, AgentPolicy

policy = AgentPolicy.load("vendor-research.json")
v = policy.check(Guard(), "https://example.com/start-trial")
print(v.decision)    # allow, deny or approval_required