Brex has open-sourced CrabTrap, a network proxy that intercepts AI agent requests and uses an AI judge to approve or deny them based on policy rules.
The company discovered that traditional guardrails cannot contain agents equipped with real credentials like API keys, and shifted enforcement from the code level to the network layer.
CEO Pedro Franceschi argues that IT leaders should adopt similar centralized network control rather than relying on SDK-level permissions.
What happened
Brex created CrabTrap, an open-source HTTP/HTTPS proxy that intercepts all network traffic from AI agents, examines policy rules, and uses an LLM-as-a-judge to approve or deny requests. The company found that traditional guardrails could not contain what agents were doing with real credentials like API keys and OAuth tokens.
Why it matters
Brex's approach addresses a gap in how AI agents are currently governed—frameworks like OpenClaw enable agents to act, but lack enterprise-scale safeguards. By enforcing policy at the network layer rather than in the agent's code, organizations can audit and control agent behavior in real time, even when agents have genuine credentials to systems that matter.
What to watch
Brex CEO Pedro Franceschi frames this as a shift in how IT leaders should think about agent governance: moving from SDK-level permissions and model guardrails to centralized network control. How widely CrabTrap is adopted, and whether other enterprises adopt similar network-layer enforcement, will signal whether this architectural approach becomes standard practice.
Ask the AI about this article →
The article identifies a structural gap in how AI agents are currently managed. OpenClaw and similar agentic frameworks have become widely adopted, but they operate without proven safeguards at enterprise scale. The challenge is that agents need genuine credentials—API keys, OAuth tokens, service accounts—to be useful, yet traditional guardrails (permissions embedded in the agent's code or baked into the model) cannot effectively limit what agents do once those credentials are in hand.
Brex's insight is architectural: the network layer becomes the enforcement point. Every request an agent makes traverses the network, creating an observation and control opportunity that is independent of the agent's code or training. By placing a proxy at this chokepoint and having it evaluate each request against policy rules using an LLM-as-a-judge, Brex sidesteps the limitations of SDK-level permissions and model-level guardrails. Franceschi's message to IT leaders is that this shift—from application-layer controls to network-layer controls—should become the standard practice for agent governance.
For example, today's edition would include:
AI-summarized, only the topics you pick — one digest a day via Email, Slack, or Discord.
Free · takes 30 seconds · unsubscribe anytimeWhat is AIToday? →
Ask AI anything about this article. Q&As are published on this page for other readers too.
Phonely Ltd. launched Alma, a large language AI model built for voice agents and trained on over 10 million re…
Aranya Inc., a startup founded last year, launched today with $11 million in funding
CBTS Technology Solutions LLC launched Forge Agents, a platform that turns a plain-language job description in…
Imec CEO Patrick Vandenameele said at SEMICON Taiwan 2026 that the Belgian research center is broadening its c…

Alphabet's AI Overviews now reach over 2.5 billion monthly users through Google Search, and its ad business ge…

Sarah O’Connor's book 'We Are Not Machines' explores how mechanization and AI have transformed the workforce…
