Vexa AgentWall is a full egress proxy and security gateway for AI agents operating over MCP, HTTP, HTTPS, and WebSocket connections. It provides organizations with a default-deny control plane to intercept, sandbox, audit, and actively block unauthorized agent tool calls and data exfiltration attempts.
Drift inferred · capture-to-capture
- HIGH code analysis flagged committed secret ×4 in noviqtechnologies/vexa-agentwall
transport — counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 0b78762 · analyzer v30 · 2w ago
danger signals7
- committed secret Google API key noviqtechnologies-vexa-agentwall-0b78762/agentwall-policy.yaml :61
AIzaSy…(39 chars, redacted) - committed secret AWS access key id noviqtechnologies-vexa-agentwall-0b78762/control-plane/proto/src/tests.rs :159
AKIAIO…(20 chars, redacted) - committed secret Anthropic key noviqtechnologies-vexa-agentwall-0b78762/src/policy/dlp.rs :592
sk-ant…(44 chars, redacted) - committed secret private key noviqtechnologies-vexa-agentwall-0b78762/src/policy/identity.rs :281
PEM private key block (redacted) - committed secret Anthropic key noviqtechnologies-vexa-agentwall-0b78762/src/policy/response_scanner.rs :497
sk-ant…(33 chars, redacted) - committed secret private key noviqtechnologies-vexa-agentwall-0b78762/test-tools/dogfood/setup-windows.ps1 :24
PEM private key block (redacted) - committed secret private key noviqtechnologies-vexa-agentwall-0b78762/tests/unit/oidc_tests.rs :13
PEM private key block (redacted)
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 606
filesystem 1
- fs noviqtechnologies-vexa-agentwall-0b78762/control-plane/ui/src/views/IdeConnections.tsx :215
<span style={{ color: '#ec4899' }}>return</span> fs.readFile(args.path, <span style={{ color: '#a78bfa' }}>"utf-8"</span>);<br/>
network 9
- net noviqtechnologies-vexa-agentwall-0b78762/control-plane/ui/src/api/client.ts :14
const res = await fetch(`${BASE}${path}`, { headers: authHeaders() }) - net noviqtechnologies-vexa-agentwall-0b78762/control-plane/ui/src/auth/AuthContext.tsx :41
const res = await fetch('/api/v1/fleet/overview') // Quick auth check - net noviqtechnologies-vexa-agentwall-0b78762/control-plane/ui/src/views/AuthProviders.tsx :201
const res = await fetch('/api/v1/auth_providers') - net noviqtechnologies-vexa-agentwall-0b78762/control-plane/ui/src/views/LlmProviders.tsx :24
const res = await fetch('/api/v1/providers/keys') - net noviqtechnologies-vexa-agentwall-0b78762/control-plane/ui/src/views/Login.tsx :24
const res = await fetch('/api/v1/auth/providers') - net noviqtechnologies-vexa-agentwall-0b78762/control-plane/ui/src/views/McpServers.tsx :35
const res = await fetch('/api/v1/fleet/mcp-servers') - net noviqtechnologies-vexa-agentwall-0b78762/control-plane/ui/src/views/SafeMode.tsx :43
fetch('/api/v1/policy/safe-mode/status') - net noviqtechnologies-vexa-agentwall-0b78762/control-plane/ui/src/views/Users.tsx :57
fetch('/api/v1/users'), - net noviqtechnologies-vexa-agentwall-0b78762/sdks/typescript/src/transport.ts :47
const resp = await fetch(url, { signal: AbortSignal.timeout(this.timeoutMs) });
declared dependencies 122
- react@^18.3.1
- react-dom@^18.3.1
- react-router-dom@^6.26.0
- recharts@^2.12.0
- @testing-library/jest-dom@^7.0.0
- @testing-library/react@^16.3.2
- @testing-library/user-event@^14.6.1
- @types/node@^26.1.1
- @types/react@^18.3.3
- @types/react-dom@^18.3.0
- @vitejs/plugin-react@^4.3.1
- jsdom@^29.1.1
- typescript@^5.5.3
- vite@^5.4.0
- vitest@^4.1.10
- k8s.io/api@v0.29.0
- k8s.io/apimachinery@v0.29.0
- k8s.io/client-go@v0.29.0
- sigs.k8s.io/controller-runtime@v0.17.0
- github.com/beorn7/perks@v1.0.1
- github.com/cespare/xxhash/v2@v2.2.0
- github.com/davecgh/go-spew@v1.1.1
- github.com/emicklei/go-restful/v3@v3.11.0
- github.com/evanphx/json-patch/v5@v5.8.0
- github.com/fsnotify/fsnotify@v1.7.0
- github.com/go-logr/logr@v1.4.1
- github.com/go-logr/zapr@v1.3.0
- github.com/go-openapi/jsonpointer@v0.19.6
- github.com/go-openapi/jsonreference@v0.20.2
- github.com/go-openapi/swag@v0.22.3
- github.com/gogo/protobuf@v1.3.2
- github.com/golang/groupcache@v0.0.0-20210331224755-41bb18bfe9da
- github.com/golang/protobuf@v1.5.3
- github.com/google/gnostic-models@v0.6.8
- github.com/google/go-cmp@v0.6.0
- github.com/google/gofuzz@v1.2.0
- github.com/google/uuid@v1.3.0
- github.com/imdario/mergo@v0.3.6
- github.com/josharian/intern@v1.0.0
- github.com/json-iterator/go@v1.1.12
- github.com/mailru/easyjson@v0.7.7
- github.com/matttproud/golang_protobuf_extensions/v2@v2.0.0
- github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd
- github.com/modern-go/reflect2@v1.0.2
- github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822
- github.com/pkg/errors@v0.9.1
- github.com/prometheus/client_golang@v1.18.0
- github.com/prometheus/client_model@v0.5.0
- github.com/prometheus/common@v0.45.0
- github.com/prometheus/procfs@v0.12.0
- github.com/spf13/pflag@v1.0.5
- go.uber.org/multierr@v1.11.0
- go.uber.org/zap@v1.26.0
- golang.org/x/exp@v0.0.0-20220722155223-a9213eeb770e
- golang.org/x/net@v0.19.0
- golang.org/x/oauth2@v0.12.0
- golang.org/x/sys@v0.16.0
- golang.org/x/term@v0.15.0
- golang.org/x/text@v0.14.0
- golang.org/x/time@v0.3.0
- gomodules.xyz/jsonpatch/v2@v2.4.0
- google.golang.org/appengine@v1.6.7
- google.golang.org/protobuf@v1.31.0
- gopkg.in/inf.v0@v0.9.1
- gopkg.in/yaml.v2@v2.4.0
- gopkg.in/yaml.v3@v3.0.1
- k8s.io/apiextensions-apiserver@v0.29.0
- k8s.io/component-base@v0.29.0
- k8s.io/klog/v2@v2.110.1
- k8s.io/kube-openapi@v0.0.0-20231010175941-2dd684a91f00
- k8s.io/utils@v0.0.0-20230726121419-3b25d923346b
- sigs.k8s.io/json@v0.0.0-20221116044647-bc3834ca7abd
- sigs.k8s.io/structured-merge-diff/v4@v4.4.1
- sigs.k8s.io/yaml@v1.4.0
- control-plane-proto@*
- clap@4
- serde@1
- serde_json@1
- serde_yaml@0.9
- tokio-util@0.7
- tokio-stream@0.1
- socket2@0.5
- hyper@1
- hyper-util@0.1
- http-body-util@0.1
- bytes@1
- hmac@0.12
- sha2@0.10
- hex@0.4
- aes-gcm@0.10
- regex@1
- jsonschema@0.17
- jsonwebtoken@9
- dashmap@5
- ed25519-dalek@2
- uuid@1
- chrono@0.4
- rand@0.8
- reqwest@0.12
- eventsource-stream@0.2
- rusqlite@0.31
- shlex@1.3
- dirs@5
- keyring@2
- notify@6
- ctrlc@3
- colored@2
- tokio-tungstenite@0.29.0
- base64@0.22.1
- hyper-tungstenite@0.20.0
- futures-util@0.3.32
- bip39@2.2.2
- unicode-normalization@0.1.25
- urlencoding@2.1.3
- tokio-rustls@0.26
- rustls-pemfile@2
- toml@1.1.3
- criterion@0.5
- tempfile@3
- tokio-test@0.4
- assert_cmd@2
- predicates@3