<strong>Open-source AI agent firewall for Verifiable Egress Control.</strong>
Open-source AI agent firewall for Verifiable Egress Control.. Exposed over MCP by the pipelock mcp server, that capability becomes something an assistant can invoke while it works, not something you go and do afterwards.
Everything the assistant can do here goes through one of these:
DLP — ** 65 built-in patterns for API keys, tokens, credentials, cryptocurrency keys, environment secrets, and financial identifiers with checksumSkill — file scanning:** pipelock skill-scan inventories agent skill files, compares them to an operator-owned lock file, and flags source-to-sinkMode — Securitystrict — Allowlist-onlybalanced — Blocks naive + detects sophisticatedaudit — Logging onlyThreat — CoverageComparison — Canonical comparison hub: AI runtime security comparisonContainment — Unprivileged process containment uses OS-native primitives. Linux uses Landlock, seccomp, and network namespaces. macOS uses sandbox-exec profilesYou will need one environment variable: PROVIDER_API_KEY. The server will not start without them, which is usually why the tools fail to appear on a first run. Keep credentials in your client's env block or a secrets manager rather than in a file you might commit.
Installation goes through your MCP client rather than a global install: point it at @modelcontextprotocol/server-filesystem on npm and it is fetched when the client starts. The copy-paste blocks for Claude Desktop, Claude Code and Cursor are further down this page.
Among the developer tooling options, the useful question is rarely "what can it do" but "what does it cost you to run" — permissions, credentials, and how much of your context its toolset consumes. Pipelock's toolset — DLP, Skill, Mode and 6 more — is a fair guide to whether it matches your workflow. It is maintained by luckypipewrench; worth a glance at recent repository activity before you build anything load-bearing on it.
This entry was verified against Pipelock's own documentation before publication; SyncDev keeps the directory reviewed rather than auto-generated.
| Tool | What it does |
|---|---|
| DLP | ** 65 built-in patterns for API keys, tokens, credentials, cryptocurrency keys, environment secrets, and financial identifiers with checksum validation. BIP-39 seed phrase detection uses dictionary lookup, sliding window |
| Skill | file scanning:** pipelock skill-scan inventories agent skill files, compares them to an operator-owned lock file, and flags source-to-sink combinations such as credential-to-network-sink or shell-to-write with line evide |
| Mode | Security |
| strict | Allowlist-only |
| balanced | Blocks naive + detects sophisticated |
| audit | Logging only |
| Threat | Coverage |
| Comparison | Canonical comparison hub: [AI runtime security comparison](https://pipelab.org/compare/) |
| Containment | Unprivileged process containment uses OS-native primitives. Linux uses Landlock, seccomp, and network namespaces. macOS uses sandbox-exec profiles. In containers, --best-effort keeps Landlock and seccomp when namespace c |
{
"mcpServers": {
"pipelock": {
"command": "npx",
"args": ["-y", "@modelcontextprotocol/server-filesystem"],
"env": {
"PROVIDER_API_KEY": "your-value"
}
}
}
}Add to claude_desktop_config.json, then restart Claude Desktop.
| Variable | Description | Required |
|---|---|---|
| PROVIDER_API_KEY | Credential the server authenticates with. | Yes |
Kill hallucinated APIs — version-accurate, up-to-date library documentation injected straight into context.
Microsoft's official browser automation server — drive a real browser through the accessibility tree, no screenshots needed.
GitHub's official server — repos, issues, pull requests, Actions and code security, straight from your assistant.
Issue tracking at the speed of conversation — Linear's official hosted server with OAuth and zero install.
Local repository surgery — status, diffs, commits, branches and history for any repo on disk.
Timezone sanity for AI — current time anywhere and correct conversions, without the model doing date math.