Repo · Safety & guardrails
jev-agent-authorization
Kinde starter: identity + permissions, then TypeSafe Jev typed gate before every MCP tool call — allow, step-up approve, or stop.
Open github.com ↗From the repository
Jev agent authorization for MCP tool calls: Kinde identity and permissions plus Jev's typed, calibrated decisions, checked server-side before every call runs
agent-authorizationai-agentsauthorizationconvexjevkindellm-securitymcpnextjsprompt-injectiontool-callingtypesafe-ai
How builders describe it
Jev agent authorization for MCP tool calls: Kinde identity and permissions plus Jev's typed, calibrated decisions, checked server-side before every call runs.
Starter kit putting Kinde identity plus Jev judgment in front of every agent tool call, with allow, hold-for-approval, or deny decided in code and written to a ledger first.
The decision Jev makes
Allow, flag or escalate a message, tool call or action.
Where it fits
Screening messages, tool calls and outputs before they cause trouble. Jev gives a fast, calibrated verdict that can sit in front of every request or agent action. All 229 safety & guardrails projects →
Related projects
Safety & guardrailssnapifRust crate and CLI that scores one agent tool call against a shipped policy and returns Auto, Review or Escalate, using TypeSafe Jev…GitHub · ★ 2 · snapif
Safety & guardrailsjev-sec.github.ioJev IDS website: one flow.GitHub · ★ 2 · jev-sec
Safety & guardrailsclaudetiquetteClaude Code plugin that rewrites a hostile prompt into a plain request.GitHub · ★ 2 · zahlekhan
Safety & guardrailsdsh-backdoor-guardGuard for DeepSeek Harness: every model-requested tool call is judged by a decision model, hosted TypeSafe Jev or a self-hosted LiquidAI d1, before…GitHub · miketako3
Safety & guardrailsopencode-auto-classifierOpenCode plugin that sends each shell command, file read, and edit to TypeSafe Jev for typed classifications, then folds those answers into…GitHub · schemaitat
Safety & guardrailspi-thunder-guardSafety guard for Pi: before each bash call (and writes outside the repo) TypeSafe Jev must be at least 85% sure the call keeps to a short restriction…GitHub · Mandalorian007