2 ms·
Show HN: The Harbinger- mTLS proxy that gives AI agents identity, not API keys
I built this as i thought this model could better to what other tools are doing. What do you guys think ?
Harbinger is an mTLS proxy that sits in front of an AI agent's outbound traffic. Every AI agent, bot, and service account gets a cryptographic identity. Every request it makes is checked against policy before it's allowed, and any real secret it needs is pulled from your own vault and swapped in only when the request is verified to be going where it claims. The agent itself never holds a standing credential.
- not-duckie 3mo agoAuthor here. Built this solo. With having AI write boilerplate/tests/docs. The parts I'd most want scrutiny on, these claims of mine: 1) mTLS 4-tier architecture over a token-based scheme : instead of copy-pasting a token into every agent's config by hand, each agent requests its own enrollment and gets approval, and what it holds afterward can't be copy-pasted and replayed the way a bearer token can. 2) for policy engine i used OPA/Rego, so it's a well-known language and easier to write complex policies.