node9-ai
Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.
as observed 2026-10-18T21:45:32.638Z- Identifier
node9-ai- Source
- npm
- Version observed
- 2.33.2
- Source repository
- https://github.com/node9-ai/node9-proxy
- Repository observation
- Commits observed in the last 90 days
- First observed here
- 2026-08-29T23:02:09.845Z
- Observations recorded
- 32
- Weekly downloads (upstream)
- 1,572
- Publish rights held by
- node9.ai
- Declared license
- Apache-2.0
Observation history
Fields that differed: version
| Field | Before | After |
|---|---|---|
version |
"2.32.0" | "2.33.2" |
Fields that differed: version
| Field | Before | After |
|---|---|---|
version |
"2.31.2" | "2.32.0" |
Fields that differed: version
| Field | Before | After |
|---|---|---|
version |
"2.30.1" | "2.31.2" |
Fields that differed: version
| Field | Before | After |
|---|---|---|
version |
"2.29.0" | "2.30.1" |
Fields that differed: version
| Field | Before | After |
|---|---|---|
version |
"2.28.1" | "2.29.0" |
Fields that differed: version
| Field | Before | After |
|---|---|---|
version |
"2.27.1" | "2.28.1" |
Fields that differed: version
| Field | Before | After |
|---|---|---|
version |
"2.27.0" | "2.27.1" |
Fields that differed: version
| Field | Before | After |
|---|---|---|
version |
"2.26.2" | "2.27.0" |
Fields that differed: description keywords version
| Field | Before | After |
|---|---|---|
description |
"IAM for your AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record | "Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the |
keywords |
["agent-permissions","agent-security","agentic-ai","ai-agent","ai-security","antigravity","claude-code","claude-desktop","codex","copilot-cli","cursor","dlp","gemini-cli","hermes-a | ["access-control","agent-permissions","agent-security","agentic-ai","ai-agent","ai-security","antigravity","claude-code","claude-desktop","codex","copilot-cli","cursor","dlp","gemi |
version |
"2.25.1" | "2.26.2" |
Fields that differed: version
| Field | Before | After |
|---|---|---|
version |
"2.24.2" | "2.25.1" |
Fields that differed: version
| Field | Before | After |
|---|---|---|
version |
"2.24.1" | "2.24.2" |
Fields that differed: version
| Field | Before | After |
|---|---|---|
version |
"2.23.2" | "2.24.1" |
Fields that differed: version
| Field | Before | After |
|---|---|---|
version |
"2.21.0" | "2.23.2" |
Fields that differed: version
| Field | Before | After |
|---|---|---|
version |
"2.20.0" | "2.21.0" |
Fields that differed: version
| Field | Before | After |
|---|---|---|
version |
"2.19.0" | "2.20.0" |
Fields that differed: version
| Field | Before | After |
|---|---|---|
version |
"2.16.2" | "2.19.0" |
Fields that differed: description keywords version
| Field | Before | After |
|---|---|---|
description |
"Security layer for AI coding agents — intercepts dangerous tool calls before they execute" | "IAM for your AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record |
keywords |
["agent","ai","claude","claude-code","guardrails","mcp","security"] | ["agent-permissions","agent-security","agentic-ai","ai-agent","ai-security","antigravity","claude-code","claude-desktop","codex","copilot-cli","cursor","dlp","gemini-cli","hermes-a |
version |
"2.15.0" | "2.16.2" |
Fields that differed: version
| Field | Before | After |
|---|---|---|
version |
"2.14.3" | "2.15.0" |
Fields that differed: version
| Field | Before | After |
|---|---|---|
version |
"2.14.2" | "2.14.3" |
Fields that differed: version
| Field | Before | After |
|---|---|---|
version |
"2.14.0" | "2.14.2" |
Fields that differed: version
| Field | Before | After |
|---|---|---|
version |
"2.13.1" | "2.14.0" |
Fields that differed: version
| Field | Before | After |
|---|---|---|
version |
"2.13.0" | "2.13.1" |
Fields that differed: version
| Field | Before | After |
|---|---|---|
version |
"2.12.0" | "2.13.0" |
Fields that differed: version
| Field | Before | After |
|---|---|---|
version |
"2.9.1" | "2.12.0" |
Fields that differed: version
| Field | Before | After |
|---|---|---|
version |
"2.8.5" | "2.9.1" |
Fields that differed: version
| Field | Before | After |
|---|---|---|
version |
"2.8.3" | "2.8.5" |
Fields that differed: version
| Field | Before | After |
|---|---|---|
version |
"2.8.2" | "2.8.3" |
Fields that differed: version
| Field | Before | After |
|---|---|---|
version |
"2.7.4" | "2.8.2" |
Fields that differed: version
| Field | Before | After |
|---|---|---|
version |
"2.7.2" | "2.7.4" |
Fields that differed: version
| Field | Before | After |
|---|---|---|
version |
"2.6.1" | "2.7.2" |
Fields that differed: version
| Field | Before | After |
|---|---|---|
version |
"2.5.0" | "2.6.1" |
Correction
If you maintain this extension and believe anything above is inaccurate, request a correction. Corrections are published, and disputed entries are marked as disputed while under review.