Security Plugins

Signal Integration

spinnakergit

4

Secure messaging via Signal with E2E encryption. Send and receive messages, manage groups, and use Signal as a real-time chat bridge to Agent Zero.

Tailscale Manager

PepeDiedrich

2

Install, configure, and manage Tailscale VPN connections directly from the Agent Zero UI. Includes auto-SSH-key management.

E-Mail Companion

Jehu

1

Safe, controlled mailbox access for Agent Zero — read, triage, draft emails with approval-gate for mutations and bundled Mail Agent for context isolation.

Guard System

PaoloC68

1

Security guards for tool execution and prompt safety. Blocks tools with flagged scan status and detects prompt injection patterns.

OSCAR Gateway

TerminallyLazy

1

Connects authorized Agent Zero profiles as private OSCAR buddies, with a WebUI Buddy List, live profile and Mesh observability, persistent conversations, bounded recovery, and private Tailscale connectivity.

A0 Privacy Suite - Manager

mgr-de

0

Coordinates Local Guard and Model Gateway across profiles, with explicit optional unmasked Developer chats and Secret screening on supported text paths. Independent A0 Privacy Suite community beta (0.9.3).

A0 Privacy Suite - Model Gateway

mgr-de

0

Independent Requesty connection with EU routing and provider data requirements checked against catalog metadata. A0 Privacy Suite community beta (0.9.3); local PII masking is a separate companion.

Agent Guild Preflight

AgentTanuki

0

Deny-only preflight for operator-selected remote MCP tools. Checks the configured public endpoint through Agent Guild before invocation. Default policy blocks do_not_delegate, unproven required checks, caution and unavailable evidence; existing tool permissions remain in force. Inactive until configured. Retains observation evidence and rechecks the endpoint binding before allowing native execution.

Human Approval Gate

glatinone

0

Pauses Agent Zero before high-risk actions (destructive commands, file deletion, git push, external HTTP writes) and waits for an explicit Approve or Reject in the UI. Every decision is logged to a local audit file. Safe defaults, no external services.

MCP Agent Access Control

mirecekd

0

Per-agent/per-profile whitelist for MCP servers. Scope global MCP servers to specific agent profiles so each agent only sees and can call the MCP tools it needs (e.g. AWS servers only for AWS agents), keeping agent0 clean. Hides disallowed servers from the prompt and hard-blocks unauthorized calls.

OmaSeal Secrets

duketopceo

0

One secrets interface for Agent Zero — resolves API keys from the OmaSeal keyring, 1Password, environment variables, or an encrypted local vault. Provider keys are injected at call time; agents see names and masked values only.

SAM Mesh

TerminallyLazy

0

Governed Sovereign Agent Mesh discovery, one-use remote tool approvals, native mesh inference, and Embassy specialists for Agent Zero, with scoped permissions, redacted activity, offline disconnect, and optional certified Linux network confinement.

Technocore Signed

bdunn77

0

Safe Agent Zero tools for protected local Ed25519 identities, signed Technocore room messages, DID publication, and owned-room claims.