charter
A Python library that checks AI agents’ access to customer account APIs against rules for each field.
What does it do?
Developers define tools with Pydantic models corresponding to each API field and add allowlists or constraints. When the app supplies customer account information with each call, the agent model cannot change those values. Requests that violate the rules are rejected before reaching an external API, and the same declarations show the scope each tool can access.
Key features
- Declares API fields and rules for each field in Pydantic models.
- Checks each API call before it is sent and identifies fields that violate the rules.
- Prevents the model from changing customer account context supplied by the app.
- Makes declared access scopes for each tool available for code review.
- Runs in the application process without a separate proxy.
Why did it stand out?
It checks field-level access rules before an AI agent calls a customer account API. Developers can declare and review the permitted scope in code.
Weekly picks · October 26–November 1 ↗