Runtime Security

What is Kontext CLI? Kontext CLI is an open-source credential broker and runtime security tool built specifically for AI coding agents. It intercepts every tool call made by agents like Claude Code, Codex, and Claude Cowork, brokers short-lived credentials at request time, and enforces security policies before any action reaches your infrastructure. Unlike traditional secrets managers that just store credentials, Kontext actively controls how and when agents use them. What is a Credential Broker for AI Agents? A credential broker is a security layer that sits between an AI coding agent and the services it needs to access. Instead of giving the agent a long-lived API key or database password, the broker issues short-lived, scoped credentials on demand for each individual tool call. The agent never holds the actual secret — it receives a temporary token valid only for the specific operation it needs to perform. ...

Autonomous AI agents are executing real actions — writing code, querying databases, sending emails, and calling third-party APIs — and the security industry is finally treating them as the high-value attack surface they represent. The AI security market is projected to reach $12.8B by 2026 at a 28% CAGR, driven almost entirely by enterprise urgency around agent deployments. Unlike traditional software vulnerabilities, AI agent attacks are often semantic rather than syntactic: a well-crafted prompt in a retrieved document can silently redirect an agent’s entire task chain without triggering a single firewall rule. Security teams that treat agents like ordinary microservices will discover this difference the hard way. ...