42 Repos
Security frameworks for defining and enforcing permissions for autonomous AI agents.
Distinguishing note: Specifically addresses role-based access for AI agents, distinct from standard user-based identity management.
Explore 42 awesome GitHub repositories matching artificial intelligence & ml · Agent Access Controls. Refine with filters or upvote what's useful.
ECC ist ein LLM-Agenten-Orchestrierungs-Framework und eine plattformübergreifende KI-Tool-Suite, die darauf ausgelegt ist, Multi-Modell-Workflows zu koordinieren. Es bietet ein System zur Verwaltung spezialisierter Agentenrollen, wiederverwendbarer Fähigkeiten und strukturierter Planung, um komplexe Softwareentwicklungsaufgaben über verschiedene KI-gestützte Code-Editoren hinweg auszuführen. Das Projekt zeichnet sich als Model Context Protocol Manager aus und bietet eine Konfigurationsschicht zur Integration externer Server und zur Prüfung der Tool-Ausführung. Es implementiert zudem eine agentische Sicherheits-Sandbox, die den Zugriff auf sensible Dateien einschränkt und auf Geheimnislecks scannt, um autonome Workflows zu sichern. Das Framework deckt breite Fähigkeitsbereiche ab, einschließlich der Automatisierung von KI-Coding-Workflows mit Leitplanken für testgetriebene Entwicklung, Modellkostenoptimierung durch intelligentes Routing und zustandsisoliertes Speichermanagement. Es enthält zudem Tools zur Durchsetzung sprachspezifischer Codierungsstandards und zur Verwaltung von Agentenverhalten über verschiedene integrierte Entwicklungsumgebungen hinweg. Das System wird über eine Befehlszeilenschnittstelle verwaltet, die die Tool-Installation, Konfigurationsreparatur und die Bereitstellung von Tool-Presets handhabt.
Controls agent permissions using profiles ranging from read-only sandboxes to auto-approval modes.
This project is an AI agent workflow framework and development toolkit designed for AI-driven software engineering. It provides a system of modular instructions, prompt libraries, and standardized routines to orchestrate complex engineering sequences and automate the decomposition of plans into technical tasks. The system differentiates itself through advanced context management and prompt engineering, using state compression and handoff documents to preserve conversation history between different AI sessions. It employs a structured library of prompt skills and high-signal trigger words to e
Provides mechanisms to summarize conversation state into documents for seamless context transfer between specialized agents.
gstack is an AI agent framework and development workflow system designed to automate the software development lifecycle. It coordinates specialized AI personas to manage tasks across product design, engineering management, and quality assurance, transforming product intent into technical specifications and final releases. The project is distinguished by its deep integration of headless browser automation and semantic code memory. It utilizes a persistent Chromium daemon for web scraping and visual auditing, and implements a searchable knowledge base that logs architectural decisions and repos
Enforces role-based access policies to control whether AI agents can search or modify repository memory.
This project is a structured educational resource and technical guide for designing and implementing autonomous systems using large language models. It provides a comprehensive curriculum and code samples focused on agentic design patterns, autonomous development, and the creation of systems capable of planning and executing multi-step tasks. The resource details the implementation of agentic retrieval-augmented generation, where models autonomously plan and refine data searches. It covers a wide array of orchestrators and design patterns, including metacognitive reflection for self-correctin
Enforces role-based access, private data handling, and content safety filters for production agents.
Twenty is a headless customer relationship management framework that enables developers to build, version, and deploy custom business applications using code. By utilizing a declarative approach to data modeling, the platform allows for the definition of custom objects, fields, and complex relationships directly within the source code. This schema-driven architecture automatically generates corresponding REST and GraphQL APIs, ensuring that data structures and interface components remain synchronized across development and production environments. The platform distinguishes itself through a m
Assign specific roles to AI agents to restrict their access and modification capabilities, ensuring compliance for automated processes.
OpenHuman is an AI application framework for building private intelligence systems and personal AI layers. It provides a system for deploying private AI assistants that execute technical tasks and manage personal knowledge bases. The project features a model-agnostic request proxy that routes AI workloads to different large language models based on requirements for reasoning, speed, or vision. It integrates an OAuth-driven data integrator to synchronize personal information from external services into a local knowledge base composed of hierarchical Markdown summaries. The framework also inclu
Enforces security tiers and command classification to restrict the autonomous actions AI agents can perform.
This project is an LLM financial agent framework and multi-agent orchestration system designed to execute complex investment banking and wealth management workflows. It provides a financial data integration layer using a standardized context protocol to connect autonomous agents to real-time market data and third-party feeds. The system utilizes a multi-agent architecture that coordinates specialized worker agents through a steering event bus to handle task delegation and secure handoffs. It includes an enterprise AI deployment manifest for provisioning agent personas, prompts, and skill sets
Coordinates the secure transfer of session authority and context between specialized agents via a steering event bus.
Nanoclaw is an LLM agent orchestrator and multi-platform chat gateway designed to deploy and manage isolated AI agents. It provides a containerized runtime that executes agents within sandboxed Linux containers, ensuring filesystem and state isolation through dedicated workspaces and host bind-mounts. The project distinguishes itself through a unified routing pipeline that connects agents to diverse messaging platforms, including WhatsApp, Discord, Slack, Telegram, Signal, and iMessage. It integrates the Model Context Protocol to extend agent capabilities via managed external data and functio
Enforces security policies that require explicit destination entries before an agent can communicate with a specific path.
This project is a Python framework for building autonomous, event-driven agent systems. It provides a unified runtime for orchestrating multi-agent workflows, managing persistent conversation state, and executing code within secure, isolated sandbox environments. The framework is designed to handle complex task delegation, allowing agents to invoke other agents as tools while maintaining context across multi-turn interactions. The framework distinguishes itself through its deep integration with the Model Context Protocol, enabling agents to connect to external data sources and remote services
Manages tool-level permissions, error handling, and filtering to ensure secure agent interactions.
This project provides a framework for managing multi-agent systems, designed to automate complex software development, infrastructure, and business workflows. It functions as a multi-agent workflow orchestrator that routes tasks to domain-specific workers while maintaining state persistence and infrastructure automation. By leveraging large language models, the system decomposes high-level objectives into actionable plans, ensuring that complex operations are executed with consistency and reliability. The framework distinguishes itself through its hierarchical agent registry and policy-driven
Enforces security boundaries by assigning specific capabilities to AI agents based on their functional roles.
Claude Code Templates is a comprehensive framework for orchestrating specialized AI agents and automating development workflows within local environments. It provides a structured system for defining, configuring, and deploying AI personas that handle specific technical tasks, ranging from backend architecture and frontend implementation to security auditing and infrastructure management. The project distinguishes itself through a configuration-driven approach that allows teams to standardize development environments and share reusable agent definitions across projects. It includes a robust C
Restricts agent capabilities by explicitly defining permitted filesystem and shell operations.
Cube is a semantic data layer that provides a unified framework for defining business metrics, dimensions, and relationships across diverse data sources. By acting as a headless business intelligence engine, it transforms raw data into a governed model that can be queried via SQL, REST, and GraphQL interfaces. This architecture ensures consistent data definitions and logic across all downstream analytical applications and reporting tools. The platform distinguishes itself through its integrated conversational AI capabilities, which allow users to explore data using natural language. It orches
Limits the specific views accessible to automated agents within the semantic model to control data interaction scope.
LiveKit is a comprehensive framework for building and orchestrating real-time, multimodal AI agents that interact with users through voice, video, and text. It provides a centralized, event-driven architecture to manage the entire lifecycle of automated participants, from initialization and session state management to graceful shutdown. By utilizing a selective forwarding unit, the platform efficiently routes media streams between participants and agents, ensuring low-latency communication and secure, token-based authentication for all connections. The platform distinguishes itself through it
Passes session authority between specialized agents to enforce distinct roles or updated instructions during a conversation.
Qwen-code is an AI-powered development framework designed for orchestrating intelligent coding agents within terminal and IDE environments. It provides a comprehensive infrastructure for automating software maintenance, code generation, and complex refactoring tasks by managing multi-agent workflows and persistent session states. The system is built to handle both interactive development and automated background processes, ensuring that agents can execute shell commands and file operations safely within isolated, sandboxed environments. What distinguishes this project is its focus on granular
Enforces granular permission policies and allowlists for autonomous AI agents.
CS-Base is a comprehensive educational platform and technical repository designed to support software engineers in mastering backend architecture, artificial intelligence engineering, and career development. It functions as a centralized knowledge hub that combines illustrated theoretical tutorials with practical, project-based learning to bridge the gap between foundational computer science concepts and professional industry requirements. The project distinguishes itself by integrating a robust career mentorship framework with advanced AI engineering resources. It provides users with tools f
Implements multi-layered permission controls and lifecycle hooks to secure autonomous agent operations.
Kilocode is an autonomous engineering platform designed to orchestrate AI agents for complex software development tasks. It functions as a comprehensive system for automating coding, testing, and repository management by integrating directly with your codebase and terminal. The platform provides a unified gateway for model orchestration, allowing for the management of agentic workflows, event-driven automation, and persistent session state across distributed development environments. The platform distinguishes itself through its federated task management and policy-based access control, which
Defines granular access rules for tools and commands to control agent capabilities.
This project provides a TypeScript software development kit for the Model Context Protocol, a standard designed to facilitate bidirectional communication between AI applications and external data sources or tools. It serves as a foundational framework for building both clients and servers, enabling language models to interact with external systems through a unified, decoupled interface. The SDK distinguishes itself by implementing a transport-agnostic connection layer that supports both local standard input-output streams and remote HTTP endpoints. It utilizes a JSON-RPC message bus to manage
Configures server access via environment variables and path permissions to link tools securely.
DataHub is a metadata management platform designed to unify technical, operational, and business context across diverse data ecosystems. By utilizing a graph-based metadata model and an event-driven ingestion architecture, it creates a centralized source of truth that maps complex data relationships, lineage, and ownership. This foundational framework enables organizations to maintain a synchronized view of their data landscape, supporting both human-led discovery and automated data operations. The platform distinguishes itself through its focus on grounding artificial intelligence and autono
Exposes governed context through standardized interfaces to allow AI agents to retrieve enriched data at machine speed.
Boto3 is the AWS SDK for Python, providing a programmatic interface for managing and automating AWS cloud infrastructure and services. It serves as a cloud management API client and resource manager for provisioning, configuring, and scaling virtual servers, databases, and storage. The library enables the implementation of infrastructure-as-code through declarative templates and scripts, allowing for the deployment of identical resource stacks across multiple accounts and geographic regions. It also provides a framework for coordinating distributed workflows, serverless functions, and contain
Restricts autonomous agent actions using IAM-based access controls and enterprise guardrails.
Eino is an AI agent development kit and LLM application framework designed for building autonomous agents and orchestrating complex language model workflows. It serves as a multi-agent orchestration engine and workflow orchestrator, providing a graph-based execution model to route data between models, tools, and retrievers. The framework distinguishes itself through a robust set of multi-agent coordination patterns, including supervisor-led management, sequential flows, and autonomous reasoning loops like ReAct. It features advanced agent execution controls such as active turn preemption, che
Enables the transfer of execution control and conversation context from a parent agent to a specialized child agent.