AgentIndex icon
AgentIndex
ToolsMCP ServersHOTCategoriesTrendingNewBest ListsCompareGuides
Submit Tool
ToolsMCP ServersHOTCategoriesTrendingNewBest ListsCompare
Home/
Security & Safety/
node9-proxy
node9-proxy logo

node9-proxy

Active·★ 219·NOASSERTION·Updated 2026-10-20

Node9 is an execution security layer for AI agents that intercepts dangerous shell commands and tool calls in real-time. It features a multi-channel approval system (native popup, browser, Slack, terminal), a flight recorder for live monitoring, and an AI negotiation loop to guide safer behavior. It also includes DLP content scanning and shadow git snapshots for undo.

node9-proxy sits in the Security & Safety category, so it is usually better judged by workflow fit, deployment style, and team needs than by isolated features alone. Based on the available metadata, it leans most clearly toward Multi-Channel Race Engine (simultaneous approvals across native/browser/cloud/terminal). A representative use case is Protect AI agents from executing dangerous commands during development. The listed license is NOASSERTION. GitHub stars are currently 219. Relevant tags include ai-safety, ai-security.

This write-up is based on the project's README and public repository data. We have not hand-tested the tool.

© 2026 AgentIndex.app|Built by a 10-year iOS Developer.
Best by use caseAboutContactAdvertisePrivacy PolicyTerms of UseQYSGitHubBuy me a coffee ☕

Browse by Category

MCP ServersCode AssistantWorkflow AutomationRAG / Knowledge BaseMulti-AgentBrowser AutomationLLM InfraDev ToolingObservability

Not affiliated with Anthropic, OpenAI or Microsoft.

Guides
#ai-safety#ai-security#claude-code#gemini#gemini-cli#llm#llm-agent#mcp-server
$ Install
$ npm install -g @node9/proxy
↗ Visit site★ GitHub
01

Features

01Multi-Channel Race Engine (simultaneous approvals across native/browser/cloud/terminal)
02Flight Recorder (real-time activity stream in browser dashboard and terminal)
03AI Negotiation Loop (instructs AI to pivot to safer alternatives)
04Shadow Git Snapshots (one-click undo for AI file edits)
05DLP Content Scanner (detects and blocks secrets in tool call arguments)
02

Why choose it

+Multi-Channel Race Engine (simultaneous approvals across native/browser/cloud/terminal)
+Flight Recorder (real-time activity stream in browser dashboard and terminal)
+Protect AI agents from executing dangerous commands during development
+Supports 4 platforms or runtime environments.
03

Trade-offs

!The final decision should still be made through side-by-side comparison with similar tools.
04

Compatibility

macOS
macOS Native
Verified via docs
Windows
Windows Native
Verified via docs
Linux
Linux Native
Verified via docs
Claude Code
Claude Code Hook
Verified via docs
05

Quick start

1
$ npm install -g @node9/proxy
06

Use cases

↳Protect AI agents from executing dangerous commands during development
↳Enable safe code editing with instant undo via git snapshots
↳Govern cloud infrastructure actions using opt-in shields for services like AWS, GitHub, and Postgres
07

Alternatives

⚡Top VS:
VSThumbGate★29→VStooltrust-scanner★19→VSantrieb-mcp-server★14→

Comments

Log in to leave a comment

No comments yet. Be the first!

On this page
01Features02Why choose it03Trade-offs04Compatibility05Quick start06Use cases
VS
claude-scholar
★13
→
ThumbGate logo
ThumbGate★ 29
Pre-action gates for AI coding agents. Skill disclosure cuts tokens. Hallucination and PII checks harden outputs. 👍 Thumbs up reinforces good behavior. 👎 Thumbs down blocks repeated mistakes. Free is local. History-aware lessons distill vague feedback. Team adds shared lessons and org visibility, plus generated review views.
VSCompare→
tooltrust-scanner logo
tooltrust-scanner★ 19
Security scanner for AI agent tool definitions
VSCompare→
antrieb-mcp-server logo
antrieb-mcp-server★ 14
MCP server that validates AI-generated infra code on real VMs and self-corrects until it works.
VSCompare→
claude-scholar logo
claude-scholar★ 13
🚀 Simplify your research workflow with Claude Scholar, the complete configuration for Claude Code in data science, AI, and academic writing.
VSCompare→
mcp-server-synology logo
mcp-server-synology★ 231
💾 Model Context Protocol (MCP) server for Synology NAS - Enables AI assistants (Claude, Cursor, Continue) to manage files, downloads, and system operations through secure API integration. Features Docker deployment, auto-authentication, and comprehensive file system tools.
VSCompare→
mcp-ts-core logo
mcp-ts-core★ 152
TypeScript template for building Model Context Protocol (MCP) servers. Ships with declarative tools/resources, pluggable auth, multi-backend storage, OpenTelemetry observability, and first-class support for both local and edge (Cloudflare Workers) runtimes.
VSCompare→
ThinkWatch logo
ThinkWatch★ 818
Enterprise AI bastion host for secure AI API and MCP access, with unified proxying, RBAC, audit logs, rate limiting, and cost tracking across OpenAI, Anthropic, Gemini, and self-hosted LLMs.
VSCompare→
martin-loop logo
martin-loop★ 398
The control plane for autonomous work and coding agent teams.
VSCompare→
See all alternatives →
07
Alternatives
node9-ai /
node9-proxy
↗

The Execution Security Layer for the Agentic Era. Providing deterministic "Sudo" governance and audit logs for autonomous AI agents.

219
Last commit3d ago
StatusActive
CategorySecurity & Safety
Links
Documentation↗Discussion↗Issues↗Releases↗
Cloud Infrastructure
Ad

Deploy on DigitalOcean

Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.

Claim $200 Free Credit