access control

MakerChecker is a self-hosted governance layer for AI agents that enforces roles, approvals, and tamper-evident audit logs. The repo shows quickstart commands, a demo flow, and SDK/connectors for TypeScript, Python, and LangChain-style integrations.

Dropway turns a folder of static files into a live, access-controlled URL. It supports public, password-protected, allowlisted, and org-only sharing, with versioned deploys, audit logs, and MCP-based access for AI tools.

Cast is an open-source, self-hosted harness for multi-user Claude agents. It focuses on routing, identity, and access control outside the prompt, with support for agent building, review flows, and extensions like email, calendar, web fetch, and WhatsApp.

SecretSpec 0.12 adds audit logs and reason-required secret access for coding agents, with CLI, SDK, and config support.

A RequestRocket article mapping the AI agent access-control stack across authentication, authorization, governance, identity, gateways, and runtime egress control. It explains how the categories differ, when each fits, and where RequestRocket sits in the landscape.