Get the latest tech news
Fine-grained HTTP filtering for Claude Code
Default‑deny HTTP(S) for dev tools and AI agents. Script rules in JS or shell, log every request, and keep egress within your policy.
RiskExampleAgents performing destructive actionsDeleting your databaseAgents leaking sensitive informationExposing API keys or credentialsAgents operating with more authority than desiredPushing straight to main instead of opening a PRAgents may transgress accidentally (user misinterpretation) or intentionally (prompt injection). In our case, they're imprecisecentralized, anycast load balancers power much of the internet and require constant maintenanceIPs change randomly and they're not a part of a service's implicit "contract". Optionally, you may redirect all traffic to the proxy server, otherwise you will need to take care in ensuring HTTP_PROXY is set in your environments and all of your web-faring applications respect it.
Or read this on Hacker News