hallpass: open-source tool checks agent permissions live before every tool call
Adorable-Algae6903 · reddit · 2026-09-24
A Reddit user released hallpass, an open-source tool addressing OWASP's "Excessive Agency" risk: agents acting in Jira, GitHub, Slack, Salesforce or AWS typically use one bot credential, so anyone who can talk to the agent can perform actions they couldn't themselves.
Before a tool call runs, hallpass queries the target system live with a read-only credential and returns allow, deny, or unknown — with unknown failing closed. It never performs the action itself.
- Supports 11 systems: Jira, Confluence, GitHub, GitLab, Slack, Google Workspace, Microsoft 365, Salesforce, AWS, Kubernetes, Argo CD; 10 more planned
- Self-hosted, single binary or Docker, no database, Apache 2.0
- Repo: github.com/roee-hersh/hallpass
The author also asks how others handle this: per-user OAuth, per-team bots, or human approval for destructive actions.
More from coding & agent
- 30 lines of JavaScript, no image models: pure-code generative art demo — nc_frey · 2026-09-24
- TRACES: A New Benchmark That Grades AI Problem-Solving Process, Not Just Correct Answers — dr_cintas · 2026-09-24
- Dev reverse-engineers Qwen Image 2.1 PE, ships ComfyUI node that auto-computes dimensions — BleynSpecnaz · 2026-09-24
- Cua Releases Cua-S1-4B, First Multimodal Decision Model RL-Trained on Live Computer-Use Tasks — multimodalart · 2026-09-24
- Applied Compute uses Jev to auto-cluster failure modes in RL training traces — rhythmrg · 2026-09-24
- Four Steps to Stop Opus 5.5 from Wasting Tokens, From a Real User — dr_cintas · 2026-09-24