Say yes to coding agents.
Not to their blast radius.

robinlogix sits between your agents and everything they can reach. Every shell command, query and API call is checked against your policy before it runs.

gateway live acme-platform / us-east-1 last 60s
0 allowed 0 held 0 blocked every call signed to the engineer who started the run
the problem

Agents don't just write code. They take action.

The same model that fixes a flaky test can drop a table, rotate a key, or email a customer. It inherits every permission of the person who started it.

Debugging infrastructure

An engineer points an agent at a failing service. It picks up prod SSH, kubectl and the metrics token in the same breath.

Answering a data question

"How bad is churn this month?" becomes a query with no limit, over a table holding real names and card suffixes.

Cleaning the pipeline

A ticket says "remove the dead jobs." The agent decides, on its own, which of them count as dead.

You can't un-ship agents. You can decide what they're allowed to reach.

policy engine

Rules at the level of a single action.

Written per agent, per repo, per environment. Pick a rule to change what happens the moment it fires.

ruleon match
6 rules, synced from robin.policy.yaml 4m ago
deploy

Works with the agents you already run.

Point the agent at the gateway instead of the open internet. No SDK, no rewrite, no change to how your team works.

Claude Codeproxied
Codex CLIproxied
Cursorproxied
Gemini CLIproxied
Aiderproxied
Devinproxied
Copilot agentproxied
Any MCP serverproxied
$ robinlogix init
gateway https://gw.robinlogix.dev
agents claude-code, cursor
policy ./robin.policy.yaml
watching 14 tools across 3 environments
$

Runs in your own cloud or ours. Sub-millisecond on the allow path, so nobody on the team notices it's there until it stops something.

Say yes to coding agents.

Every agent, every tool, every action under control. In one afternoon.