lookfirst adds human-in-the-loop approvals and tamper-evident audit logs to MCP agents
Ambitious_Answer6857 · reddit · 2026-11-05
Open-source lookfirst (Apache-2.0, v0.2.0) sits between an MCP agent and its tools: the agent proposes an action, the user previews and approves or declines, then it runs and writes a tamper-evident audit log. A fake-bank demo shows balance lookups running freely while transfers require approval, with the log flagging tampered entries.
- Falls back to a local web page and fails closed when clients don't support MCP elicitation (which the author found most don't send)
- First public release, not yet used daily; author seeks feedback on approval friction
- Not tested on Windows
More from coding & agent
- Vector search finds resemblance, not proof: where Microsoft Fabric Graph fits — WirelessLife · 2026-11-05
- Databricks recipe: multi-tenant Genie isolation via OAuth custom identity claims + ABAC — Wise_Ear_4064 · 2026-11-05
- How do you teach AI agents company-specific jargon? Four glossary approaches, none great — ladybawss · 2026-11-05
- Garry Tan spends $200K/yr on a 23-skill Claude Code setup — benchmarks show elaborate harnesses can lose to vanilla — echen · 2026-11-05
- Teams experiment: cheap models for subagents, top model only on the primary agent — cramforce · 2026-11-05
- Mistral's Vibe CLI releases version 3.1 — qtnx_ · 2026-11-05