About Node9 · node9 documentation
About Node9
Open-source execution security for AI agents.
What Node9 is NOT
- Not a semantic content filter — it evaluates concrete tool calls, not AI reasoning.
- Not an AI firewall for network traffic — it operates on MCP tool calls at the process level.
- Not a replacement for OS-level permissions — it is a policy layer on top of them.
What Node9 IS
- A transparent proxy for MCP stdio tool calls.
- A policy enforcement layer you control via JSON config.
- An audit trail for all agent actions on your machine.
- A dashboard (Mission Control) for real-time visibility.
Open Source
The Node9 proxy (
Cloud features (Mission Control, Policy Studio, team audit sync) require a Node9 workspace account and are opt-in via
node9-proxy) is open source. You can inspect exactly what it does to your tool calls, run it locally without any cloud dependency, and contribute improvements.Cloud features (Mission Control, Policy Studio, team audit sync) require a Node9 workspace account and are opt-in via
node9 login.