Observed arrival · 2026-10-30
lockhttp puts AI-agent web requests behind a human gate
An open-source proxy routes an AI agent’s outbound HTTP(S) requests through rules that pass some reads, pause others for human review, and deny requests that violate network or policy limits.
- For
- Teams running AI agents in isolated containers
- Worth noticing
- ASK requests wait 60 seconds; without the separate console, the system refuses them with E_NO_CONSOLE.
Field notes
The documented policy distinguishes requests by method, destination, body, and configured rules rather than treating an allowed host as universally safe. The page says approvals occur in a separate lockhttp account, and that identical requests share a decision only when their fingerprint matches. The current release is labeled a Docker-only pre-release; optional HTTPS decryption requires a local CA and signer.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue