Porticol Guard: let coding agents call your APIs without the keys

Three levels of enforcement

Windows runs levels 1 and 3 only. An agent's name in the log is what the client reports, not a verified identity.

What each agent gets

Hooks are how Guard sees shell commands. Claude Code and Codex leave an HTTP call to the proxy, and ask (Claude Code) or deny (Codex) a command that changes how its calls reach it. Cursor's hook decides a plain call itself and waits 25 seconds for a person. porticol-cli agent setup --print-trust prints the certificate and proxy variables that make Node, Python, curl and other runtimes trust the local proxy, plus the Java keytool line.

A policy a team lead can read in a minute

One YAML file decides what every agent may do. Shadow mode logs what would have happened and lets the call through, so a team can tune the rules before anything is blocked. Switch mode to enforce when the rules match how the team works.

version: 1
mode: shadow                      # log what would happen first; switch to enforce when tuned
environments: [local, staging, production]
hosts:
  api.stripe.com: { env: production, key: "{{stripe_live_key}}" }
  api.stripe.test: { env: staging, key: "{{stripe_test_key}}", header: Authorization, format: "Bearer {key}" }
rules:
  - id: reads
    match: { method: [GET, HEAD] }
    action: allow
  - match: { env: production, method: DELETE }
    action: deny
    reason: No agent deletes on production.
  - match: { host: api.stripe.com, method: POST, path: /v1/refunds }
    when: { body.amount: { over: 5000 } }
    action: ask
    approvers: [team:payments]
  - match: { env: production, method: [POST, PUT, PATCH] }
    limit: { per_minute: 10, per_agent: true }
    action: allow
  - match: { env: production }
    window: { days: [mon, tue, wed, thu, fri], from: "09:00", to: "18:00", zone: Asia/Kolkata }
    action: allow
agents:
  claude-code: { up_to: production }
  "*": { up_to: staging }

The first matching rule wins. A call above the agent's ceiling is denied before any rule. A call no rule matches asks on a protected environment and is allowed elsewhere. The Policy page validates the file as you type and, over the last seven days, shows how often each rule allowed, asked and denied and what shadow mode would have done.

How it's different from tools that only hide keys

Hiding a key is necessary and no longer enough. These are the parts that make the difference when an agent sends the call.