pipelock: Open-source AI agent firewall for MCP security and agent egress

by pipelab-org · MCP Server · ★ 977

Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h

How to install pipelock

docker pull ghcr.io/luckypipewrench/pipelock:3.7.0
brew install luckyPipewrench/tap/pipelock

Taken from the project's README on GitHub. Check the security audit before running it.

Security audit verdict: SAFE · quality 68/100

None of the 42 rules matched — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →

The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.

ai-agentsai-securitycidlpegress-proxyfetch-proxygithub-actiongolangintegrity-monitoringllm-security

Quick Facts

Stars977
Forks112
LanguageGo
CategoryMCP Server
LicenseApache-2.0
Quality Score68/100
Open Issues6
Last Updated2026-11-02
Created2026-02-08
Platformsgo, mcp
Est. Tokens~822k

About pipelock

Open-source AI agent firewall for Verifiable Egress Control. <img alt="OpenSSF Best Practices" src="https://www.be

Compatible Skills

These tools work well together with pipelock for enhanced workflows:

  • reconmap — semantic(0.18)+complementary+rare_topics+same_lang+similar_pop+shared_platform (56%)
  • whistleblower — semantic(0.23)+complementary+rare_topics+similar_pop (47%)
  • toolhive — semantic(0.32)+rare_topics+same_lang+similar_pop+shared_platform (46%)

pipelock alternative? Top 6 similar tools

Looking for a pipelock alternative? If you're comparing pipelock with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.

  • node9-proxy by node9-ai · ⭐ 225

    Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do

  • toolhive by stacklok · ⭐ 2.3k

    ToolHive is an enterprise-grade platform for running and managing Model Context Protocol (MCP) servers.

  • agentic-radar by splx-ai · ⭐ 1.1k

    A security scanner for your LLM agentic workflows

  • medusa by Pantheon-Security · ⭐ 1.0k

    AI-first security scanner. NEW in v2026.7: Claude Code compromise detection — vet .claude/ hooks, permissions

  • agent-skills-hub by zhuyansen · ⭐ 493

    AgentSkillsHub (agentskillshub.top) — security-graded directory of open-source Claude skills, MCP servers & AI

  • trpc-agent-go by trpc-group · ⭐ 1.9k

    A Go framework for building production agent systems with graph workflows, tools, memory, A2A, AG-UI, MCP, eva

More MCP Server Tools

Explore other popular mcp server tools:

View all MCP Server tools →

Popular Go Agent Tools

How this security grade is produced

Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.

The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.

Sources & who's responsible:

View on GitHub → Browse MCP Server tools