Agent Shield
BetaBeta: protection is being verified. Please do not rely on Agent Shield to protect secrets yet. An update is coming.
by Privaku
Stop AI coding agents from touching files, secrets and commands they shouldn't.
What it blocks
Your agent asks. Agent Shield decides.
Every file read, shell command and tool call from your AI coding agent is checked against your rules before it runs.
Secrets and .env files
Reads of .env files, SSH keys, cloud credentials and keychains are stopped before your agent sees them.
Dangerous shell commands
Commands like rm -rf on your home folder, or piping a download straight into a shell, are blocked or held for your OK.
Unknown MCP tools
Tool calls to MCP servers you haven't approved are checked, and secrets in their replies are masked.
Unapproved network calls
Uploads and requests from agent commands to hosts you haven't allowed are stopped.
Agent Shield works at the tool-call layer of supported agents. It doesn't yet stop a program that opens its own network connection directly.
How it works
Three steps. Then it stays out of your way.
Install
Open the download and drag Agent Shield to Applications.
Pick the apps to protect
Choose your AI coding agents and the folders and sites they must never touch.
Get alerts
When something is blocked, you see what, which agent, and why. Allow it once if you trust it.
Privacy
Your code stays yours.
Agent Shield checks every action on your Mac against clear rules and a built-in risk check. Your code, files and prompts are not uploaded. For extra protection, technical users can add an optional AI model that spots prompt injection; it runs on your Mac.
No telemetry, and no account inside the app.
Trust
Don't take our word for it.
Source-available core
The policy engine, rules format, default rules and agent adapters are published under the PolyForm Shield 1.0.0 licence, so you can read exactly what decides.
Source-available core on GitHub
PolyForm Shield license
Verify the build
Each release publishes a SHA-256 hash. Check the file you downloaded matches:
shasum -a 256 ~/Downloads/Agent-Shield-0.1.0.dmg
Security whitepaper
Architecture, threat model, fail-closed design and honest limits.
Download
Agent Shield for Mac. Free.
Signed and notarized by Apple. Download details
Download for Mac