Pre-send budget enforcement
Evaluates spend, request, token, and requests-per-minute policies before a supported proxied request reaches the provider. Over-policy requests are stopped locally.
Guardrail is a local spend firewall for AI coding agents. It records usage metadata and, on supported proxy integrations, checks budget policies before forwarding requests to providers.
Guardrail is a local spend firewall for AI coding agents. It runs on the user’s machine and places supported tools in front of their providers through a local proxy at 127.0.0.1:4000.
For supported proxy integrations, it records usage metadata and evaluates spend, request, token, and rate policies before a network call. Requests that violate a configured policy are refused locally rather than forwarded. Guardrail does not store prompts, responses, or code in its usage records.
Support depends on the tool and login mode: Claude Code and Codex with an OpenAI API key support pre-send policy checks, while Codex with a ChatGPT subscription provides telemetry only. Cursor support is planned.
Evaluates spend, request, token, and requests-per-minute policies before a supported proxied request reaches the provider. Over-policy requests are stopped locally.
Writes model, token, cache, estimated-cost, timing, and status metadata to a local SQLite file without storing prompts, responses, or code.
Shows spend, sessions, and cost details locally. The Free plan includes seven days of history; Pro and Team include 90 days.
Connects Claude Code and Codex through command-line configuration, with different enforcement behavior for Codex API-key and ChatGPT-subscription modes.
Pro adds a hosted dashboard and sync across machines. Team adds an admin console, per-member spend, and shared project caps for supported proxy integrations.
Set a session or project policy before an agent runs unattended, so supported API requests that exceed the policy are stopped locally instead of forwarded.
Review token, cache, reasoning-token, and estimated-cost metadata to understand what contributed to a coding session’s spend.
Use Pro cloud sync to review supported local usage from multiple machines while keeping prompts, responses, and code out of synced data.
Use Team’s admin console, per-member spend, and shared project caps to monitor and control supported proxy usage across a group.
No. Blocking requires a supported proxy integration and depends on the tool’s login mode. Claude Code and Codex with an OpenAI API key support pre-send policy checks. Codex with a ChatGPT subscription is telemetry-only, and Cursor support is planned.
The installer downloads and verifies a platform release and places the `guardrail` binary on the PATH. Run `guardrail start`, connect a supported tool with `guardrail connect claude-code` or `guardrail connect codex`, and configure a budget in the dashboard. The daemon binds to `127.0.0.1:4000`. Windows installation currently uses WSL2 while a native build is in progress.
Local records contain metadata such as model, token counts, cache activity, estimated cost, timings, and status in SQLite. Prompts, responses, and code are not stored. Cloud sync sends metadata only; personal sync is opt-in, while Team machines sync by default on supported versions and can opt out.
For supported proxy integrations, Guardrail stops the request before the network call and returns a clean 429 or policy error to the tool. How the tool retries or recovers depends on that tool.
Free does not expire and requires no email or credit card. It includes the local firewall, budget policies, local dashboard, and seven days of history. Pro costs $15 per month or $144 per year and adds cloud features; Team is offered as flat bundles for up to five or 10 seats.
トラフィックデータは参考情報としてご利用ください。
www.edgee.ai
Edgee is an agent gateway for coding teams that reduces token usage, routes requests across models, and provides usage visibility. Its Compression V2 works as a drop-in CLI layer for Claude Code, Codex, OpenCode, Cursor, and other supported agents.
harden.run
Agentic Integrity Foundation is a local endpoint-security product for coding agents. It evaluates supported tool calls before execution and can allow, approve, make safe, block, or record actions on a developer’s machine.
www.cohesor.com
Cohesor is an AI gateway and control plane for routing model requests, compressing agent context, governing spend, and brokering MCP tool calls. It is designed for teams running internal or customer-facing AI agents.
deepaksinghcs14.github.io
deadeye is a plugin for coding agents that selects a suitable model and effort level for each task, while trimming verbose command output before it enters context. It is built for Claude Code and also supports Codex CLI, Gemini CLI, Cursor, and Windsurf on an experimental basis.
obot.ai
Obot is an open-source enterprise AI control plane and MCP gateway for deploying, governing, and auditing AI agents, MCP servers, and Skills. It helps organizations centralize access policies, discovery, authentication, and activity records across AI tooling.
getbb.app
bb is a local-first, open-source IDE for running coding agents in parallel, organizing their work in threads, and extending the workspace with plugins. It is designed for developers and teams that want to coordinate provider-based agents and customize their software workflow.