Govern the action, not the session
Each semantic action is authorized against attenuated authority in real time. A valid session is not a blank check.
Private beta · AI Action Control Plane
AI agents don't just generate.They act.Control what happens next.
RaksHex evaluates consequential AI actions before execution, checks delegated authority and policy, releases brokered credentials only after an ALLOW, and records every decision in a tamper-evident Action Ledger.
Scoped evaluation for engineering and security teams. No self-serve production claims.
financial.refund({ amount: 400, orderId })
Pre-execution authorizationFail-closed credential brokerHash-chained Action LedgerNode + Python clients
Works withOpenAI
Decision trace
Recent Action Ledger
data.exportALLOW
infra.deployALLOW
financial.refundDENY
Live decision
Agent identified
finance-support-prod
Authority checked
parent scope ≤ $50
Decision reached
DENY — exceeds limit
Ledger recorded
hash-chained entry
EVALUATING…
OpenAI
Claude
GitHub
VS Code
Postman
Slack
Express
FastAPI
Django
Gemini
Mistral
OpenAI
Claude
GitHub
VS Code
Postman
Slack
Express
FastAPI
Django
Gemini
Mistral
01
Authorize
Evaluate the semantic action before execution.
02
Attenuate
Keep child authority equal to or narrower than its parent.
03
Broker
Release credentials only after an enforceable ALLOW.
04
Record
Write the decision to a tamper-evident Action Ledger.
Architecture Comparison
Session-Level vs Action-Level Control
Drag the handle to compare governing who has a session against governing what each individual action is actually allowed to do.
RaksHex Agent FirewallAction-Level
Enforcement Active
Semantic action authorizationEnforced at the credential
Delegated AuthorityActive
Parent-to-child attenuation — a child authority can never exceed its parent's scope.
Enforced
Credential MediationBroker
A DENY blocks the credential itself — the secret never reaches a denied caller.
Fail-closed
Action LedgerHash-chained
Every decision is recorded tamper-evidently for audit and dispute resolution.
Tamper-evident
Why Teams Move Past Session-Level Auth To RaksHex
A valid API key or session token proves who is calling — not whether this specific action, right now, should be allowed.
Govern the action, not the session
Every semantic action is evaluated against the caller's actual delegated authority, not just whether the session is valid.
A DENY that actually denies
Enforcement happens at the credential broker, so a blocked action can't fall back to a raw API key that still works.
Evidence you can hand to an auditor
The hash-chained Action Ledger gives you a tamper-evident record of every authorization decision, not a log you have to trust.
The credential broker mediates every brokered request. A DENY blocks the secret from ever reaching the caller — enforcement lives at the same layer as the credential, not in a dashboard someone has to watch.
Built-in capabilities
The Agent Firewall core, piece by piece: how an action gets authorized, delegated, enforced, and recorded.
Semantic actions
Policy is written against what an agent is doing, not the HTTP call underneath it.
- Actions like financial.refund, not raw endpoints
- One policy model across providers
- SDK-based integration into your agent's call path
- No proxy re-architecture required to get started
Semantic Action Authorization
Evaluated// Authorize a semantic action
const decision = await firewall.authorize({
action: "financial.refund",
authority: delegatedAuthority,
});
Supported Providers
One Policy Model, Every Provider
The same semantic action and delegated-authority model applies regardless of which LLM provider or coding agent is making the call.
RaksHex Agent Firewall
Action Authorization & Policy Engine
OpenAI
LLM ProviderAzure OpenAI
LLM ProviderAWS Bedrock
LLM ProviderGoogle Vertex / Gemini
LLM ProviderGitHub Copilot
Coding AgentCursor
Coding AgentOpenAI-Compatible
Self-Hosted / CustomOne system of record
Security, FinOps, and developer access should agree on what AI is running.
Point tools solve isolated pieces. RaksHex connects authorization, credential mediation, and evidence so the same answer holds up in an engineering review, a finance review, and an audit.
Deny at the credential
The credential broker mediates brokered requests. A DENY blocks the secret from reaching the caller.
Enforce at runtime
Evaluate provider and model rules, budgets, tool policies, PII redaction, injection signals, and kill switches before execution.
Adoption without theater
Evaluate RaksHex with evidence you can inspect.
We do not publish invented customer logos, quotations, or comparative scores. Pilot teams receive a scoped rollout plan, permission map, test cases, and an exportable audit trail for their own environment.
Research RaksHex with your AI.
Open the same evidence-first evaluation prompt in the AI tool you already use.
Founder
Akshay Kammar
Founder & Builder, RaksHex
Building RaksHex to make autonomous AI agents controllable across actions, credentials, permissions, and spend before execution — with evidence teams can inspect afterward. RaksHex is currently a private-beta, pre-incorporation startup focused on technical validation and early design partners.
Changelog
See what's new in RaksHex
July 2026
View all changesPublished customer legal, privacy, and security documentation
May 2026Waitlist system with email confirmation
April 2026Credential broker kill-switch controls added
Private beta FAQ
The questions a security team should ask first.
No certification theater and no magic claims. Start with the enforcement boundary, the authority model, and the evidence RaksHex leaves behind.
Read the Agent Firewall docsRaksHex is an AI Action Control Plane. Its Agent Firewall evaluates semantic actions against delegated authority and policy before execution, mediates brokered credentials, and writes decisions to a hash-chained Action Ledger.
Scoped private beta
Put one consequential AI action behind RaksHex.
Start with one agent, one provider, and one action that matters. Prove ALLOW, DENY, credential mediation, and the resulting audit evidence before expanding the rollout.