hallpass: open-source tool checks agent permissions live before every tool call
Adorable-Algae6903 · reddit · 2026-09-24
A Reddit user released hallpass, an open-source tool addressing OWASP's "Excessive Agency" risk: agents acting in Jira, GitHub, Slack, Salesforce or AWS typically use one bot credential, so anyone who can talk to the agent can perform actions they couldn't themselves.
Before a tool call runs, hallpass queries the target system live with a read-only credential and returns allow, deny, or unknown — with unknown failing closed. It never performs the action itself.
- Supports 11 systems: Jira, Confluence, GitHub, GitLab, Slack, Google Workspace, Microsoft 365, Salesforce, AWS, Kubernetes, Argo CD; 10 more planned
- Self-hosted, single binary or Docker, no database, Apache 2.0
- Repo: github.com/roee-hersh/hallpass
The author also asks how others handle this: per-user OAuth, per-team bots, or human approval for destructive actions.
Related event: Open-Source hallpass Adds Real-Time Permission Checks for Agents(2 posts)→
More from coding & agent
- The decade of agents: simulate real customers to test your agent before launch — EXM7777 · 2026-11-11
- FluentCRM MCP Server lets you manage marketing automation from Cursor or Claude — modelcontextprotocol · 2026-11-11
- Databricks' revised Genie agent tells CEO Ali Ghodsi the unvarnished truth — TechCrunch AI · 2026-11-11
- Elvis Saravia: agents will subsume traditional software — and can even cut code bloat — omarsar0 · 2026-11-11
- Every launches Everycut, an agent-native Mac video editor where every control is an agent tool — every · 2026-11-11
- Anthropic's Fable 5.2 built a professional video editor overnight, unsupervised — every · 2026-11-11