Hunt through scattered files
agent.yamltools.jsonIAM roleenvironmentAPI docs
Reviewers chase access across systems and can still miss what the agent is able to do through connected tools.
Pre-deployment security for AI agents
Approve what your agents are allowed to do. Before they do it.
ControlLoop builds an Agent Capability Bill of Materials, detects changes to tools and transitive permissions, and blocks dangerous capability expansion before deployment.
01Local-firstYour source stays in your environment.
02DeterministicThe same evidence produces the same verdict.
03CI-nativeDecide before capability reaches production.
Capability reviewPR #184 · refund-agent
Capabilities37
Changes4
Critical1
Effective capability path
Agentrefund-agent
→Toolpayments-api
→Actionrefund:write
+toolissue_refundAdded
+resourcepayments/*Added
~identitypayments-roleChanged
Policyproduction-no-new-writeCritical
ControlLoop gateDeployment blocked
EXIT 1Evidence generated
evidence.jsonCore artifactACBOM
Agent Capability Bill of Materials
A clear inventory of every tool, identity, resource, action, and delegated agent your agent can reach.
Agent→Tool→Identity→Action
01 The control gap
A small agent change can quietly unlock a lot more. ControlLoop shows you exactly what changed.
An agent's access can come from many places: tools, identity and permission settings, API configuration, other agents, and environment metadata. A pull request that looks small can give it powerful new abilities.
ControlLoop brings those pieces together and explains, in plain language, what the agent gained access to before anyone approves the change.
See the complete access picture
Agent→Tool→Identity→Action
The Agent Capability Bill of Materials shows what the agent can reach, what changed, and whether that change should ship.
02 The product
Inventory. Compare. Enforce.
ControlLoop turns agent access into evidence your team can understand, review, and govern using the workflow developers already use.
Agent Capability Bill of Materials
Build one reviewable inventory from manifests, tool contracts, identities, permissions, and delegated agents.
Capability diff
Compare effective authority against a trusted baseline and surface what became newly reachable—not just which files changed.
Deterministic CI gate
Evaluate explicit evidence against explicit policy, then pass, warn, require review, or block before deployment.
03 The workflow
From git push to a clear decision.
No cloud upload is required for scanning. No probabilistic model decides whether the build passes. Explicit capability evidence is evaluated against explicit policy.
CLI · Local Ready
$ controlloop gate . --baseline baseline.json --no-network✓ discovered 14 tools
✓ resolved 37 capabilities
× 1 forbidden expansion
- 01DiscoverScan
Parse agent definitions, tool contracts, identities, and delegation.
- 02NormalizeMap
Build a canonical Agent Capability Bill of Materials.
- 03CompareDiff
Calculate effective authority against the trusted baseline.
- 04EnforceGate
Pass, warn, require review, or block with evidence.
04 Standards-aware
Works with the way your agents are built.
ControlLoop reads common agent, API, and identity definitions, then brings them into one clear access map. Custom formats can plug into the same model.
Agent → Tool → Identity → ActionOne clear agent access map
01MCP02A2A03OpenAPI04OASF05IAM06Custom manifests
05 MVP pricing
Free to inspect. Paid to enforce together.
The local CLI earns trust. The Team tier turns that trust into a shared control point across private repositories.
CommunityFor individual builders
$0forever
Understand what an agent can do on your own machine.
- ✓Local-first CLI scanning
- ✓Capability BOM generation
- ✓Baseline policy checks
- ✓JSON and SARIF output
- ✓Public repository CI
Planned launch tier
TeamFor security and engineering teams
$199/ month
Govern capability changes in private CI workflows.
- ✓Private repository CI gates
- ✓Inline pull-request findings
- ✓Shared policy bundles
- ✓Capability history and evidence
- ✓Exceptions and attestations
06 Questions
Clear answers.
What does “agent” mean here?+
A deployable software identity that can choose and invoke tools to pursue a goal. You point ControlLoop at its manifest, tool definitions, identity and permission metadata, policies, and related configuration—not a human job title.
Does my source code leave my environment?+
The scanner is designed to run locally or inside your CI environment. Team services receive structured findings and collaboration evidence, not a copy of your entire source tree.
Is this a runtime firewall?+
No. Runtime controls react while an agent is operating. ControlLoop is a pre-deployment control that detects and stops dangerous capability expansion before new configuration ships.
Is the gate powered by an LLM?+
No. Policy outcomes are deterministic and auditable. The same capability evidence and policy produce the same verdict.
The standard for agent capability approval
Ship agents with proof.Not hope.
ControlLoop is being built for teams that need a clear answer before agent authority reaches production.
Get early access