01
Secrets
Strips keys and tokens from what agents read. If it looks like a secret, it does not pass.
An agent will open the file you never wanted it to touch. We put a local check in that gap — every call validated before it runs, at schema speed.
On July 18, a coding agent read a .env file it was never asked to open. The keys left the machine. AI agents often hold real secrets, like keys and passwords. Nobody sees what they do with them. You find out later, if at all. Most teams just trust the agent. The fence checks first. Most teams just trust the agent. The fence checks first.
What your agent sends out, checked on your machine. No cloud in the path.
Strips keys and tokens from what agents read. If it looks like a secret, it does not pass.
Checks every MCP tool call before it runs. Plain rules decide in under 10ms.
Flags tricks hidden in tool output. The agent never acts on them.
A record of every decision. Each row names the rule that fired.
Checks what is sent to AI models and what agents read and write.
Wider coverage for how agents work today.
Four patterns where the fence proves its value, from solo dev to agency fleet. These are examples, not customer stories.
Agency running client MCP servers
One team of agents touches client repos all day. One wrong read can send a client's secrets out.
Each client gets its own rule file. A no for one client stays a no.
Solo dev shipping with Claude Code agents
One dev, one laptop, and keys that must stay in env vars. The agent can read any file.
Risky calls are denied by default. Bad pushes, stray writes, and env reads are stopped.
Gateway fronting every MCP endpoint they expose
A gateway opens private files to outside tools. One gap reads like an open door.
Each tool gets a short allow list. Other calls are denied first.
A REPL that could reach the vault
A coding helper could reach the secret vault. The first test tried to read the keys.
Out of scope commands are refused. The vault path never reaches the model.
bench notes · july 2026
A node is one machine that runs Context Fence. Unlimited rules on every plan.
Nodes, not seats. Monthly or annual billing — prices converted to your currency live. privacy policy.
One honest issue a month · unsubscribe anytime