[bmdpat]
§ 001 / AGENTGUARD

Runtime guardrails for
AI agents_

I'm Patrick Hughes. I build small AI tools for developers shipping agents into the real world. AgentGuard is the flagship: budget caps, loop detection, timeouts, and kill switches before your agent burns money at 2 AM.

install
$ pip install agentguard47
PyPI downloads
20,000+
GitHub stars
3
Package
Python
Built by
1 developer

Stats update hourly from PyPI and GitHub. Downloads use a conservative floor when upstream totals are unavailable.

The bet: a useful software company can be one human, a stack of tools, and agents doing the boring work.

§ 002 / WHY IT EXISTS

First stop the run. Then inspect it.

Most agent tools tell you what happened after the run. AgentGuard is the guardrail layer I wanted before letting agents work unattended.

Start with the Python SDK. Add MCP only when you want your coding agent to read traces and budget health. Use the hosted dashboard when local files are not enough.

Read GitHub docs ->
Downloads
20,000+
Version
v1.2.10
GitHub stars
3
Forks
2

Stats update hourly from PyPI and GitHub. Downloads use a conservative floor when upstream totals are unavailable.

local proof in code
from agentguard import BudgetGuard, JsonlFileSink, LoopGuard, Tracer

budget = BudgetGuard(max_cost_usd=5.00, max_calls=50)
loop = LoopGuard(max_repeats=3)
tracer = Tracer(
    sink=JsonlFileSink(".agentguard/traces.jsonl"),
    service="support-agent",
    guards=[loop],
)

with tracer.trace("agent.run") as span:
    budget.consume(calls=1, cost_usd=0.02)
    loop.check("search", {"query": "refund policy"})
    span.event("tool.call", data={"tool": "search"})
    # Call your agent or tool here.
If the run crosses a limit, AgentGuard raises clearly and writes local proof you can inspect without a dashboard.

Use the right layer

SDK

Stop bad runs in Python.

Open source. Local-first. Raises inside the running process when a budget, loop, rate, retry, or timeout limit is crossed.

MCP

Let coding agents inspect proof.

Read-only access for Claude Code, Cursor, Codex, and other MCP clients to traces, alerts, usage, costs, and budget health.

Dashboard

Keep retained runs when local files are not enough.

Use the hosted app for read keys, retained history, alerts, and shared visibility. Keep the first integration local if that is all you need.

Create read key ->

What it stops

Budget caps

Stop a run before an experiment turns into a surprise bill.

Loop detection

Kill repeated tool calls before retries become an operator problem.

Timeouts

Put a hard wall-clock ceiling around unattended agent work.

Rate limits

Keep background jobs from hammering tools while nobody is watching.

Retry limits

Stop retry storms instead of letting flaky tools spin forever.

Local proof

Write JSONL traces and incident reports without sending data anywhere.

Optional MCP config

MCP client config
{
  "mcpServers": {
    "agentguard": {
      "command": "npx",
      "args": ["-y", "@agentguard47/mcp-server"],
      "env": {
        "AGENTGUARD_API_KEY": "ag_your_read_key_here"
      }
    }
  }
}
§ 003 / TOOLS

AgentGuard is the flagship. The rest is the shelf.

Use AgentGuard when you need runtime controls. The other tools are small utilities from the same workshop. Open what helps. Skip what does not.

§ 004 / BUILDER

Built by one developer using the product.

This is not a platform committee. It is Patrick building useful AI tools, using AgentGuard on the agent work that should not run loose.

01

Runtime controls

AgentGuard is the product I reach for before an agent can spend, loop, or run unattended.

02

Agent fleet

22 small agents handle repeatable work: checks, summaries, drafts, and repo chores.

03

Build notes

Every useful lesson turns into docs, posts, examples, or another small tool.

04

One operator

Patrick keeps the judgment. The software handles the boring loops around it.

§ 005 / BUILD NOTES[ ALL POSTS ] ->

Recent notes from the build.

Short posts on agents, local models, cost control, and the parts of this stack that actually held up.

Get The One-Person Holdco (free PDF)

How one human plus twenty-two AI agents runs a seven-pillar portfolio with no employees.