Agentmetry
A local-first flight recorder for AI coding agents.
Agentmetry hooks the tool lifecycle of Claude Code, Cursor, Codex and Antigravity, writes every tool call, approval and denial to a hash-chained JSONL trail on your machine, and runs sequence detection over the session. A credential read followed by network egress becomes one finding rather than two unremarkable log lines.
Everything runs locally. There are no cloud calls and no telemetry. Forwarding to Elastic ECS, Splunk HEC or a webhook exists and is off unless you configure it.
pip install agentmetry
agentmetry doctor
Check the detection claims yourself
The corpus ships inside the package, so this works from a clean install:
agentmetry benchmark
It replays recorded sessions through the real rule engine and exits non-zero on any missed rule or any false positive. The benign half is the number that matters: any tool can fire on an attack, and a feed that cries wolf gets muted.
What it does not do
- It is not a CASB. It records the agents you wire in. An unmanaged browser assistant is invisible to it.
- It is a recorder, not a sandbox. The only enforcement path is pre-execution DLP blocking in the hook.
- The DLP is regex, not ML. A starting pack you extend in YAML.
- It is a public alpha. Integration surfaces may still change.
Full documentation, the event schema, and the SIEM integration guides are in the repository.
- Source and issues: https://github.com/blitzcrieg1/agentmetry
- Website: https://agentmetry.ai
Apache-2.0.
1 maintainer
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file agentmetry-0.7.0.tar.gz.
File metadata
- Download URL: agentmetry-0.7.0.tar.gz
- Upload date:
- Size: 413.8 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
1b0e74a231e5aeb5889abc765ece3a27b3dd6ba9185bd718f5a935eb31e26735
|
|
| MD5 |
8ac40a1aef9911c990da6ee7e586f54e
|
|
| BLAKE2b-256 |
9c81fd08b5be8dd675e170739d3cf39428dd2dc920787e164b148f708de00e0c
|
Provenance
The following attestation bundles were made for agentmetry-0.7.0.tar.gz:
Publisher:
release.yml on blitzcrieg1/agentmetry
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
agentmetry-0.7.0.tar.gz -
Subject digest:
1b0e74a231e5aeb5889abc765ece3a27b3dd6ba9185bd718f5a935eb31e26735 - Sigstore transparency entry: 2618219719
- Sigstore integration time:
-
Permalink:
blitzcrieg1/agentmetry@28889cea2d48d014875bffa8cd58b67127714a83 -
Branch / Tag:
refs/tags/v0.7.0 - Owner: https://github.com/blitzcrieg1
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
release.yml@28889cea2d48d014875bffa8cd58b67127714a83 -
Trigger Event:
push
-
Statement type:
File details
Details for the file agentmetry-0.7.0-py3-none-any.whl.
File metadata
- Download URL: agentmetry-0.7.0-py3-none-any.whl
- Upload date:
- Size: 338.0 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
d640c7043bc37189a7f9f84bad13bdbf882a5b182aa9e7c7e3f4782c92fb46ba
|
|
| MD5 |
1bfdca73f1720dfd494ccea2bae724d7
|
|
| BLAKE2b-256 |
47258049d7e6453e4ff1c1716ceb510ef8036280c9110decfb1183db87eef995
|
Provenance
The following attestation bundles were made for agentmetry-0.7.0-py3-none-any.whl:
Publisher:
release.yml on blitzcrieg1/agentmetry
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
agentmetry-0.7.0-py3-none-any.whl -
Subject digest:
d640c7043bc37189a7f9f84bad13bdbf882a5b182aa9e7c7e3f4782c92fb46ba - Sigstore transparency entry: 2618219737
- Sigstore integration time:
-
Permalink:
blitzcrieg1/agentmetry@28889cea2d48d014875bffa8cd58b67127714a83 -
Branch / Tag:
refs/tags/v0.7.0 - Owner: https://github.com/blitzcrieg1
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
release.yml@28889cea2d48d014875bffa8cd58b67127714a83 -
Trigger Event:
push
-
Statement type:
