About Node9 · node9 documentation

About Node9

Open-source execution security for AI agents.

What Node9 is NOT
  • Not a semantic content filter — it evaluates concrete tool calls, not AI reasoning.
  • Not an AI firewall for network traffic — it operates on MCP tool calls at the process level.
  • Not a replacement for OS-level permissions — it is a policy layer on top of them.
What Node9 IS
  • A transparent proxy for MCP stdio tool calls.
  • A policy enforcement layer you control via JSON config.
  • An audit trail for all agent actions on your machine.
  • A dashboard (Mission Control) for real-time visibility.
Open Source
The Node9 proxy (node9-proxy) is open source. You can inspect exactly what it does to your tool calls, run it locally without any cloud dependency, and contribute improvements.

Cloud features (Mission Control, Policy Studio, team audit sync) require a Node9 workspace account and are opt-in via node9 login.