TAP
Credential isolation for AI agents: placeholder secrets, policy checks, optional human approval.
Open source Repository Open in the app JSON README (API)
About
Credential isolation for AI agents: placeholder secrets, policy checks, optional human approval.
Details
- Kind
- MCP servers
- Topic
- No topic detected
- Publisher
- tech.human
- Origin
- official
- Category
- ferramentas
- Transport
- http
- Version
- 0.1.0
- Stars
- 12
- Last push
- 2026-07-23T04:25:53Z
- Repository state
- ativo
- Language
- Rust
- License
- Apache-2.0
- Added
- 2026-08-29 04:01:55
- Updated
- 2026-08-29 04:01:55
- Origin id
tech.human/tap
README
# Tool Authorization Protocol (TAP) Credential isolation, approval gating, and connector routing for AI agents. This repository contains the code that is most useful for: - auditing request routing and connector behavior - debugging failed requests - understanding approval flows - improving connector-side request shaping - contributing fixes to the core TAP experience > [!WARNING] > **Self-hosting means you own the security of your credentials and signing keys.** > TAP keeps secrets out of your agents, but running it yourself puts the host > hardening, key isolation, and correct policy-engine operation on you. It's a path > for teams that are well versed in security. For everyone else the hosted version is > strongly recommended: credentials sit in a hardware enclave we can't read into, with > no ops to run. Start free at [tap.human.tech](https://tap.human.tech). ## Start Here - `crates/tap-proxy/src/routing.rs` — how TAP resolves connector target shapes - `crates/tap-proxy/src/placeholder.rs` — credential substitution and position validation - `crates/tap-proxy/src/policy.rs` — approval policy enforcement - `docs/` — full documentation including self-hosting guide ## Included - core proxy and storage crates - Telegram and Matrix approval bots - remote MCP server (`tap-mcp`) - CLI - docs (self-hosting, API reference, credential setup) ## Not Included - enclave deployment glue (CCE policy generation, release-policy automation, ARM templates, env config) - production workflows and secret bootstrapping - managed hosting operations glue - the hosted dashboard UI source (a placeholder is shipped so the proxy compiles) The enclave **key-management source is included** (`key_provider_enclave.rs`, `kms_azure.rs`, `skr.rs`) — it's the custody model documented at [docs.tap.human.tech/security](https://docs.tap.human.tech/security), and each hosted release's enclave measurement is published in [`measurements/`](measurements/). Hosted deployment and operational infrastructure are maintained separately from this repository. ## Security See [`SECURITY.md`](SECURITY.md) to report a vulnerability. ## License [Apache-2.0](LICENSE): free to use, read, modify, and self-host. This repo is the open-source TAP runtime (`tap-core`, `tap-proxy`, `tap-bot`, `tap-cli`, `tap-mcp`). The hosted dashboard and managed-service deployment glue are proprietary and live in a separate private repo. ## Contributing See `CONTRIBUTING.md`. ## Testing ```bash # Needs Postgres (default postgres://tap:tap@localhost:5434/tap, override with # POSTGRES_DATABASE_URL). Isolated suites parallelize; env-mutating unit tests stay serial. cargo test -p tap-core cargo test -p tap-proxy --test integration --test e2e cargo test -p tap-proxy -p tap-bot -p tap-cli --lib --bins -- --test-threads=1 ```