About Agent Chaperone
Agent Chaperone is an MCP server published by agent-chaperone in the Browser category: screens an AI agent's tool calls before they run and tool results before the agent reads them. An MCP proxy plus a hooks adapter for a client's built-in tools.
The repository has 1 stars and 0 forks, with the last commit 3 days ago. Recent commit activity is the strongest signal that reported issues will get attention.
Install
From source
git clone https://github.com/agent-chaperone/agent-chaperoneThis server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Ask AI
✦
Ask AI about Agent Chaperone
Powered by Claude · Grounded in docs
I know everything about Agent Chaperone. Ask me about installation, configuration, usage, or troubleshooting.
Security checks
6 checks have not been run yet.
Releases
v0.4.0v0.4.0 · 14 Oct 2026Minor Changes f952c31: `hook pre` and `hook post` now screen the built-in tools of Cursor, VS Code agent mode and Hermes Agent, as well as Claude Code. The agent is read from the payload, or named with `--client`, and each is answered in…
v0.3.3v0.3.3 · 23 Sep 2026Patch Changes 8caf7dd: `wrap` says what to do with a Gemini CLI server written as `httpUrl`, Gemini CLI's deprecated spelling of a Streamable HTTP server. It was skipped with the reason `it names no command or http url`, which read as if…
v0.3.2v0.3.2 · 23 Sep 2026Patch Changes 4381666: `wrap` no longer writes a remote entry the client cannot start. A server declared as `{"type": "http", "url": ...}`, which is how VS Code writes one, was rewritten to run the proxy but kept `type: "http"`, so the…
v0.3.1v0.3.1 · 21 Sep 2026Patch Changes cc81536: Redact the credential itself rather than the first thing in the match that looks like it. The span was located by searching the match for the captured text, which finds its first appearance, so a connection string…
v0.3.0v0.3.0 · 19 Sep 2026Minor Changes Screen through OpenRouter or the Vercel AI Gateway when TypeSafe is not available. Their probabilities are not calibrated: every threshold that ships was chosen against measured numbers from a different model, so the…