qtap - eBPF agent for pre-encrypted egress
eBPF agent that captures pre-encrypted network traffic from containers and processes, attributing every egress to its originating process. Aimed at observability and exfiltration detection in agent runtimes.
This entry doesn't have a long-form writeup yet. Follow the source link above for the full context.
Featured in
Related entries
mcp-shark - Wireshark for Model Context Protocol
Electron capture and inspection tool for Model Context Protocol traffic. Records every HTTP request/response between an IDE and its MCP servers for forensic analysis.
claude-code-organizer - dashboard for CC configs
npx dashboard to manage Claude Code memories, configs, and MCP servers. Includes a tool-poisoning scanner, context token budget tracker, duplicate cleanup, and scope management.
Aegis - runtime policy enforcement for AI agents
TypeScript policy engine that wraps agent execution with cryptographic audit trails, human-in-the-loop approvals, and a kill switch, with no code changes to the agent itself.
Nexus - governance gateway for LLM and MCP traffic
Rust gateway that fronts LLMs and MCP servers with policy enforcement and observability. Aimed at securing agent traffic in larger deployments.