Authsome – open-source local auth proxy for AI agents(github.com)
github.com
Authsome – open-source local auth proxy for AI agents
https://github.com/manojbajaj95/authsome
4 comments
How is it different from tools like https://github.com/clawvisor/clawvisor? From a first glance autosome seems like a more focused version of clawvisor without the overhead of agent identity.
Haven't used clawvisor, but what I understand is that its trying to solve the same problem but very diffefrently. Authsome doesn't bundle any tooling and works as an MITM proxy with credential injection. This means you can work with your own tools, cli's or MCPs.
so I wrote authsome. The bit I think is actually interesting is the run command:
It launches the child behind a local auth proxy and the proxy intercepts outbound HTTPS and injects Auth headers at request time. the child process never has the secret in its environment, so it can't leak through os.environ, ps -e, or anything that dumps a subprocess env and the agent code doesn't change as well.
the tokens are stored locally, encrypted, and refreshed before they expire. Oauth flows for interactive and headless, plus a browser bridge for API-key providers. There is a cli for pulling headers directly when you don't want the proxy.
the proxy only sees traffic that goes through it, so libraries that pin their own CA bundle slip past, also the streaming uploads and long-lived connections probably have edge cases I haven't hit. It's still alpha, v0.2.1.
Most interested in feedback on the proxy approach itself, that's the part I'm least sure about.
https://github.com/manojbajaj95/authsome