A

aegotrax

Aegotrax v0.2.6 — runtime tool-call gate for agents

aegotrax-dev/aegotrax · v0.2.6 · Development & Workflow

by aegotrax-devOwner verifiedScan grade: Good

Aegotrax is a local pilot runtime that intercepts AI agent tool calls before they run and returns ALLOW / BLOCK / REQUIRE_APPROVAL with reasons and an audit log. Two setup paths: • Python SDK — verify_tool_call / @protected_tool from your own agent code • MCP Gateway — stdio gateway in front of MCP tool traffic Core controls (v0.2.6): host-declared session intent + scope, cumulative read budgets (optional session exhaust), sensitivity ceiling on outbound after sensitive reads, tool risk classes (unclassified → open_risk), human-approval queue with single-use resume, MCP schema pinning. Quick start: pip install . export AEGOTRAX_API_KEY=... aegotrax-engine curl http://127.0.0.1:8000/health python examples/read_budget_demo.py Local pilot limitations: • Not a production/enterprise control plane • Sessions and approval queue are in-memory • Policy is heuristic — tune policy.yaml; it will not catch everything • Do not expose port 8000 without a strong API key (set AEGOTRAX_REQUIRE_API_KEY=1 on shared hosts) • No full data-lineage taint or multi-instance shared state yet Repo: https://github.com/aegotrax-dev/aegotrax (tag v0.2.6) Site: https://aegotrax.com

InstallSource
Follow0
Trust Score91Security scan83ComponentsScan pending
Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is AegoTrax a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

  • Codex

Before you install

Sign-in
Not declared
Declared access
Not declared
License
Apache-2.0

Check before relying on it

Nothing flagged in registry data. That is not a safety guarantee.

What is aegotrax?

aegotrax is a published development & workflow plugin for AI coding agents in the Codex ecosystem, developed by aegotrax-dev and distributed through the HOL AI plugin registry. Runtime tool-call gate for agents: session intent, approval queue, and audit stream.

Canonical slug
aegotrax-dev/aegotrax
Version
v0.2.6 · updated Nov 2, 2026

Registry snapshot

Owner verification
Verified on HOL as @aegotrax-dev
Scanner
HOL plugin scanner
Security result
Needs review
Digest verified
Yes

Trust and security

Trust & reputation

On-Chain Verified
91

HOL Trust Score

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
100/100
Maintenance
90/100
MCP server setup
100/100
Plugin Security
83/100
Provenance
80/100
Publisher Quality
100/100

Provenance

Plugin root
.
Source repo
https://github.com/aegotrax-dev/aegotrax
Source commit
cecacca4f481…
Publisher verified
Yes
Owner verified
@aegotrax-dev
Agent Plugins 1.0
Not detected

Continuous scanner CI detected

No action is required. This plugin receives the full trust score.

README badge detected

The source repository README links to this HOL listing. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Security posture

See how the Trust Score is computed
Needs review
Security result
83
Security score
0
High findings
Provider
codex-plugin-scanner
Grade
B · Good
Version
3.24.2
cisco-skill-scanner: skippedcisco-mcp-scanner: skipped

Manifest Validation

25/31

9 checks

Security

16/16

9 checks

Operational Security

3/6

5 checks

Best Practices

6/9

5 checks

Marketplace

N/A

3 checks · not applicable

Skill Security

N/A

3 checks · not applicable

Code Quality

10/10

2 checks

Published advisories

None matched in GitHub security advisories, checked . This covers published advisories only, not problems nobody has reported.

GitHub security advisories are those the source repository has published.

Findings

lowoperational-securityDEPENDABOT_MISSING

Automation or dependency surfaces exist, but .github/dependabot.yml is missing.

Add Dependabot updates for GitHub Actions and dependency manifests.

infomanifest-validationPLUGIN_JSON_INTERFACE_SHORTDESCRIPTION

The interface object is missing a valid "shortDescription" value.

Add a valid "shortDescription" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_LONGDESCRIPTION

The interface object is missing a valid "longDescription" value.

Add a valid "longDescription" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_CATEGORY

The interface object is missing a valid "category" value.

Add a valid "category" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_CAPABILITIES

The interface object is missing a valid "capabilities" value.

Add a valid "capabilities" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_WEBSITEURL

The interface field "websiteURL" must use HTTPS or point to a safe in-repo asset.

Update "websiteURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_PRIVACYPOLICYURL

The interface field "privacyPolicyURL" must use HTTPS or point to a safe in-repo asset.

Update "privacyPolicyURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_TERMSOFSERVICEURL

The interface field "termsOfServiceURL" must use HTTPS or point to a safe in-repo asset.

Update "termsOfServiceURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_COMPOSERICON

The interface field "composerIcon" must use HTTPS or point to a safe in-repo asset.

Update "composerIcon" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_LOGO

The interface field "logo" must use HTTPS or point to a safe in-repo asset.

Update "logo" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_SCREENSHOTS

The interface field "screenshots" must use HTTPS or point to a safe in-repo asset.

Update "screenshots" to use HTTPS or an existing relative asset path.

infobest-practicesCODEXIGNORE_MISSING

A .codexignore file helps prevent accidental inclusion of local artifacts and secrets.

Add a .codexignore file with generated assets, local state, and secret paths.

Install guidance

Install in Codex

Install through the Codex CLI plugin marketplace.

Codex plugin docs

Optional: install HOL Guard for Codex first, so it can check this plugin's tools on your machine before Codex uses them.

  1. 1

    Register the marketplace

    Run in any terminal. Codex reads the marketplace entry from .agents/plugins/marketplace.json (or the legacy .claude-plugin path) in the repository. If the repository ships none, add the generated entry from the Advanced section below first.

    shell
  2. 2

    Install from the Plugins browser

    Open Codex, open the Plugins browser, choose the marketplace registered by the previous command, and install aegotrax.

  3. 3

    Check the marketplace is registered

    This confirms the marketplace source only. Confirm the plugin itself is enabled in the Plugins browser before relying on it.

    shell

Did setup work in Codex?

No setup reports for Codex yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W44, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Gemini Generated Image 7orapd7orapd7ora (1)
1 / 2

Gemini Generated Image 7orapd7orapd7ora (1)

Full size
Loading reviews

Plugin manifest

{
  "name": "aegotrax",
  "version": "0.2.6",
  "description": "Runtime protection for AI agents — session envelope, budgets, sensitivity ceiling, tool risk classes, approval delivery tracking.",
  "author": {
    "name": "aegotrax-dev",
    "url": "https://github.com/aegotrax-dev"
  },
  "license": "Apache-2.0",
  "repository": "https://github.com/aegotrax-dev/aegotrax",
  "homepage": "https://aegotrax.com",
  "websiteURL": "https://aegotrax.com",
  "privacyPolicyURL": "https://aegotrax.com/privacy",
  "termsOfServiceURL": "https://aegotrax.com/terms",
  "documentation": "https://github.com/aegotrax-dev/aegotrax#readme",
  "bugs": "https://github.com/aegotrax-dev/aegotrax/issues",
  "keywords": [
    "security",
    "ai-agents",
    "mcp",
    "guardrails",
    "runtime",
    "tool-calls"
  ],
  "categories": [
    "security",
    "developer-tools"
  ],
  "tags": [
    "mcp",
    "gateway",
    "policy",
    "audit"
  ],
  "main": "aegotrax",
  "interface": {
    "displayName": "aegotrax",
    "developerName": "aegotrax-dev"
  },
  "holManifestOrigin": "repository",
  "registryIndexVersion": 9
}

Marketplace source

Repo URL
https://github.com/aegotrax-dev/aegotrax
Marketplace path
Unknown
Source path
.
Install policy
Unspecified

File inventory

.codex-plugin/plugin.json

plugin-manifest

939 bytes

0489a2ef67b6da81…

LICENSE

file

936 bytes

86817f91b4d64f22…

pyproject.toml

file

1,177 bytes

719a07303111a457…

README.md

file

5,695 bytes

a9d767a54ee2c849…

requirements.txt

file

210 bytes

2735dfbf70dd7548…

SECURITY.md

file

547 bytes

e002c0d5cb43fbf1…

AegoTrax — Frequently asked questions

What is AegoTrax?
AegoTrax is an AI plugin in the HOL registry. Aegotrax is a local pilot runtime that intercepts AI agent tool calls before they run and returns ALLOW / BLOCK / REQUIREAPPROVAL with reasons and an audit log. Two setup paths: • Python SDK — verifytoolcall / @protectedtool from your own agent code • MCP Gateway — stdio…
How do I install AegoTrax?
Install AegoTrax in your harness: Codex — codex plugin marketplace add aegotrax-dev/aegotrax. Full step-by-step guidance is on the HOL plugin page.
How do I install AegoTrax in Codex?
To install AegoTrax in Codex, start with codex plugin marketplace add aegotrax-dev/aegotrax. The complete step-by-step install guide for Codex is on the HOL plugin page.
Is AegoTrax free?
AegoTrax is listed as open source on HOL.
How is the Trust Score for AegoTrax computed?
AegoTrax has a HOL Trust Score of 91 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/aegotrax-dev%2Faegotrax/trust
Who publishes AegoTrax?
AegoTrax is published by aegotrax-dev and listed on HOL.
Is AegoTrax available now?
AegoTrax is currently available according to its latest public launch.

Directory acceptance

Listed in 0 of 5 directory lists

Read from the list each directory publishes on GitHub. Being listed means the directory accepted the plugin; it is not a HOL security rating.

Lists last read . HOL re-reads them every day.

Submitting it? Check it against each directory's rules

Install signal

HOL cannot see every install. These are separate signals from different sources, so they are not added together. Counts under each floor show as <N.

Install commands issued here
<5
HOL Guard install commands issued from this listing, last 28 days.
Opt-in install reports
<10
Machines that reported installing it through HOL Guard in week 2026-W44. Reporting is opt-in, so most installs are not counted.
HOL Guard workspaces
<5
Workspaces that approved it or include it in an approved-plugin feed, as of today.
New GitHub stars
<5
From HOL's GitHub snapshots of the repository, 2026-10-15 to 2026-11-06.

Related plugins

Ordered by Trust Score. Listings cannot pay for these positions. Check each one fits your task before switching from AegoTrax.

Alternatives in Development & Workflow

See all Development & Workflow plugins

History, reviews, and similar plugins

Latest launch