Preview. These maps are our reading of public sources and haven't been checked with the projects' maintainers yet.
Geiger
Read-only command (npx geiger-scan) that inventories every AI agent, MCP server, hook, plugin, skill and AI extension on a machine and labels what each can execute, read or reach.
atomburst.io/geigerActive
v0.4.0 released 2026-09-21 (last push same day); Show HN 49 points. (checked 2026-10-25)
In Agent guardrails
Where it stands apart
- Who is it for? both (5% of 21 others)
- Which shared standard or format does it mainly build on? Model Context Protocol (MCP) (19% of 21 others)
- Where does it mainly step in? outside the action path (inventory, records, or checks afterwards) (14% of 21 others)
- What mainly decides whether an action is allowed? no per-action decision: it isolates, inventories, or records (24% of 21 others)
- If the guard itself breaks, is missing, or cannot decide, what happens by default? not applicable: it is not in the action path (6% of 17 others)
What it shares with most of the community
- Is it actively maintained? active (81% of 21 others)
- How is the main thing licensed? permissive open source (MIT/Apache/BSD) (67% of 21 others)
- How is it mainly sustained? company with a paid product, tier, or ads (50% of 20 others)
- Can it run entirely on your own device or infrastructure, without the maker's servers? yes (76% of 21 others)
- Do you need an account to use it? no account (67% of 21 others)
- Which agents does it work with? any agent or process (not limited to a named list) (71% of 21 others)
- In the default setup, where does the agent's work actually execute? directly on the host machine, as usual (52% of 21 others)
- What is the main thing it protects? the developer's machine and files (52% of 21 others)
- Does it control the agent's outbound network access? no (56% of 16 others)
- What is it mainly for? adding checkpoints, review, or evidence (52% of 21 others)
- Is enforcement kept out of the agent's reach? yes, enforced in code or infrastructure the agent cannot change (95% of 21 others)
Nearest neighbors
- Vultrino 65% of 17 shared answers match
- cMCP (AgenTrust) 60% of 15 shared answers match
- OpenAPPA 60% of 15 shared answers match
Every answer
| Question | Answer | Source |
|---|---|---|
| Is it actively maintained? | active One month since last release; very new (created 2026-09-06). | source 2026-10-25 |
| How is the main thing licensed? | permissive open source (MIT/Apache/BSD) MIT | source 2026-10-25 |
| How is it mainly sustained? | company with a paid product, tier, or ads Free tool from Atomburst, a security company with paid products. | source 2026-10-25 |
| Can it run entirely on your own device or infrastructure, without the maker's servers? | yes | source 2026-10-25 |
| Do you need an account to use it? | no account Page states "No account. No telemetry." Run via npx geiger-scan. | source 2026-10-26 |
| Who is it for? | stands apart both Plain-language findings aimed at anyone with agents installed. | source 2026-10-25 |
| Which shared standard or format does it mainly build on? | stands apart Model Context Protocol (MCP) Inventories MCP server and agent configs; MCP configs are its main input. | source 2026-10-26 |
| Where does it mainly step in? | stands apart outside the action path (inventory, records, or checks afterwards) Inventory before anything happens. | source 2026-10-25 |
| What mainly decides whether an action is allowed? | stands apart no per-action decision: it isolates, inventories, or records | source 2026-10-25 |
| If the guard itself breaks, is missing, or cannot decide, what happens by default? | stands apart not applicable: it is not in the action path | source 2026-10-25 |
| Which agents does it work with? | any agent or process (not limited to a named list) | source 2026-10-25 |
| In the default setup, where does the agent's work actually execute? | directly on the host machine, as usual | source 2026-10-25 |
| What is the main thing it protects? | the developer's machine and files | source 2026-10-25 |
| Does it keep a record of agent actions? | no, or not a focus | source 2026-10-25 |
| Does it control the agent's outbound network access? | no | source 2026-10-25 |
| What is it mainly for? | adding checkpoints, review, or evidence | source 2026-10-25 |
| Is enforcement kept out of the agent's reach? | yes, enforced in code or infrastructure the agent cannot change Read-only; nothing to enforce. | source 2026-10-25 |
Sources
This page was derived from:
- GitHub · github.com/Atomburstofficial/geiger · read 2026-10-25
- Web page · atomburst.io · read 2026-10-25
- Web page · atomburst.io/geiger · read 2026-10-25
Are you a maintainer? Claiming and correcting projects is coming soon.