1. Conduid
  2. Browser
  3. Reins
MCP server · Browser

Reins

· github.com/pegasi-ai/reins

Runtime security for OpenClaw agents. Scan, fix, monitor.

Unclaimed agent-observabilityagent-securityai-monitoringai-safetyaudit-trailbrowser-automationcuahuman-in-the-loopinterventionmcpopenclaw
InstallView source
52Fair

Scored 4 months ago · breakdown

About Reins

Reins is an MCP server in the Browser category: runtime security for OpenClaw agents. Scan, fix, monitor. It has been installed 0 times through Conduid.

Install

Clone
git clone https://github.com/pegasi-ai/reins

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Reins

Powered by Claude · Grounded in docs

I know everything about Reins. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

  • ·README presentNot checked yet.
  • ·License declaredNot checked yet.
  • ·Tests presentNot checked yet.
  • ·Dependencies pinnedNot checked yet.
  • ·No dynamic code executionNot checked yet.
  • ·Scoped permissionsNot checked yet.

README

In Greek myth, Athena gave Bellerophon the golden bridle — reins included — that let him guide Pegasus. Reins applies the same idea to AI agents: raw power is not enough — what matters is making it controllable.

Reins enforces deterministic security policies on every agent action, scans your configs for OWASP ASI10 vulnerabilities, and tracks drift over time. Policies evaluate in under 50ms. Works with Claude Code PreToolUse and PostToolUse hooks, OpenClaw, and any MCP-compatible agent.

Quickstart

npm install -g @pegasi-ai/reins
reins init

Claude Code Skill

Install the Reins skill to give Claude Code awareness of your security posture:

mkdir -p ~/.claude/skills/reins
curl -o ~/.claude/skills/reins/SKILL.md \
  https://raw.githubusercontent.com/pegasi-ai/reins/main/.claude/skills/reins/SKILL.md

Or clone the repo — the skill is included at .claude/skills/reins/ automatically.

Demo

Reins demo

An OpenClaw agent tries to bulk-delete 4,382 Gmail messages. Reins blocks it before execution.

What Reins does

  • Prevent — Block destructive actions before execution. Score irreversibility. Detect risky browser state.
  • Pause — Route high-impact actions through terminal or messaging approval flows. Require explicit CONFIRM-* tokens for catastrophic operations.
  • Prove — Preserve an immutable audit trail of every decision, approval, and block.

Security guarantees

  • Zero Trust — every action evaluated before execution
  • Synchronous — agent cannot proceed until the hook exits
  • No network in the hot path — policies cached locally, enforced offline
  • Fail-closed — any unhandled hook error blocks the action
  • Immutable audit — append-only JSONL at ~/.openclaw/reins/decisions.jsonl

Documentation

Full docs at reins.sh/docs:

Contributing

PRs welcome. See CONTRIBUTING.md.

License

Apache 2.0 — see LICENSE.

README mirrored from the source repository 4 months ago. The original is authoritative.

Questions

About Reins

How do I install Reins?

Run git clone https://github.com/pegasi-ai/reins, then add the server to your MCP client's configuration. Conduid has recorded 0 installs, so the command is known to work with current clients.

Is Reins safe to use with an AI agent?

Its trust score is 52 out of 100 (fair). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Reins still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.