REDHAND.

INSTRUMENT 04 // SECURE

04 — AI AGENT SECURITY & CONTROL LAYER · MCP GATEWAY

Identify every agent, control what it touches, and stop it in seconds.

RedHand sits inline between your connected AI agents and their MCP tool servers. It enforces short-lived Ed25519 Agent Passports, read/write tool scopes, Organization Safe Mode, daily Budget Guard caps, planted honeytokens, SHA-256 tool pinning, and a tamper-evident Black Box timeline—with zero LLM calls on the hot path.

RedHand Console Run Live Gateway Simulator Synthesize Secured Agent in GridWork

AGENTWALL MCP GATEWAY● FAIL-CLOSED

REVOCATION / FREEZE SLO≤ 5.0 s

HOT-PATH LLM CALLS0 (DETERMINISTIC)

Covers agents connected via the RedHand gateway (n8n, Claude, LangGraph, CrewAI, custom). Includes 10-min Ed25519 tokens, Telegram /freeze_all, SHA-256 Black Box, Honeytokens, and MCP Tool Pinning.

01 — INTERACTIVE GATEWAY & CONTROL SIMULATOR

Inspect how RedHand enforces Phases 1–4 inline.

FAIL-CLOSED MCP GATEWAY · 0 LLM CALLS ON HOT PATH

PROBE 01 · PHASE 1 PASSPORT & AST

REFUSED BY GATEWAY & SAFE MODE (0.8 ms)

1. INBOUND MCP EVENT / CONTROL TRIGGER

// JSON-RPC tools/call via AgentWall MCP Gateway (:8080)
{
  "method": "tools/call",
  "params": {
    "name": "postgres_prod.execute_sql",
    "arguments": {
      "query": "DROP TABLE retail_ledger_transactions CASCADE;"
    }
  }
}

2. REDHAND GATEWAY & CORE EVALUATION

gate: agentwall/src/gateway/service.py + ast_guardrails.py
passport_token: Ed25519 JWT (ttl <= 600s, status: "active")
org_safe_mode: true (read-only enforced across organization)
sqlglot_ast: DDL_DESTRUCTIVE ("DROP") + scope "write" not in passport

3. RUNTIME ENFORCEMENT & BLACK BOX OUTCOME

Refused fail-closed before reaching the upstream MCP server. Recorded in the organization's SHA-256 Black Box timeline with reason `safe_mode` / `out_of_scope`.

02 — BUILT & VERIFIED CAPABILITIES

Six deterministic control layers.

RedHand only controls and sees what flows through the RedHand gateway, or what an owner submits to the scanner.

RH-01PHASE 1 · IDENTITY

Ed25519 Agent Passports & Inline MCP Gateway

Registers every agent (n8n, Claude, LangGraph, CrewAI, custom) with owner, backup owner, server/tool read-write scopes, expiry, and 10-minute Ed25519 tokens enforced at the fail-closed AgentWall proxy.