News for hackers. Stuff that matters.

Show HN: Latch – Open-source security middleware for AI agents

https://www.latchagent.com/

Latch is an open-source proxy that sits between AI agents and the tools they use. It intercepts all tool calls and applies security policies in real-time:

Safe operations pass through instantly. Risky operations require human approval via dashboard or Telegram. Dangerous operations are blocked completely

I built Latch to address the growing security risks of AI agents accessing critical systems. There have been 1,800+ exposed agent gateways discovered in the wild and recent security audits showing multiple vulnerabilities in agent frameworks, so this was motivated by the clear urgent need for better controls.

Implementation is simple: a CLI wrapper around MCP servers that takes a few minutes to set up. You can do it through your dashboard or with quick command (npx @latchhq/cli wrap)

Key features:

Policy engine using natural language rules, or create rule-based policies by tool name, action class, or domain.

Audit logging

Telegram integration for mobile approvals

The project addresses what security researchers call the "lethal trifecta" - when AI agents have access to private data, process untrusted content, and can communicate externally. This creates a new attack vector traditional security tools don't address.

I think the space is wide open and looking for contributors!

GitHub: https://github.com/latchagent/latch Docs: https://latch.mintlify.app

( 5 comments | 3 points | on HN )
Re:Show HN: Latch – Open-source security middleware for AI a... by rarekev on Friday February 06, 2026 @02:14PM (#46916889)
Cool! I've been too scared to try openclaw. Can't wait to try.
Re:Show HN: Latch – Open-source security middleware for AI a... by cblovescode on Friday February 06, 2026 @02:21PM (#46916969)
ha totally understand, let me know when you give it a go!
Re:Show HN: Latch – Open-source security middleware for AI a... by taesamleez on Friday February 06, 2026 @01:52PM (#46916618)
Is Telegram the only channel to get notified on??
Re:Show HN: Latch – Open-source security middleware for AI a... by cblovescode on Friday February 06, 2026 @01:53PM (#46916628)
Telegram, and then through the dashboard. Will soon add integrations for Slack, maybe email(?), not sure yet!
Re:Show HN: Latch – Open-source security middleware for AI a... by mcassagnes on Tuesday February 10, 2026 @04:09PM (#46966964)
Big fan of the Audit log as a way to build trust towards my tools or upstreams