GitRails-Let agents call only the GitHub endpoints and params you allow

Name: GitRails-Let agents call only the GitHub endpoints and params you allow
Availability: InStock
Author: maxaw

by maxaw·Apr 24, 2026·1 point·2 comments

Visit Project View on HN

AI Analysis

●●SolidBig BrainSolve My Problem

Regex-param filtering locks agents to specific paths without full repo access.

Strengths

•Regex param matching allows path-level scoping beyond standard OAuth scopes.
•Key separation lets trusted agents provision untrusted ones safely.
•HTTP proxy design works with any agent capable of network calls.

Weaknesses

•Only 21 endpoints supported currently, limiting utility for complex workflows.
•Shared rate-limit budget across all agents could cause contention issues.

Post Description

This is a proxy over the GitHub API. The aim is to make it easy to provide untrusted agents very fine-grained access to GitHub. To test it, you can install the GitHub app, receive a principal key, and point a trusted agent at the README.md with the key and ask it to help you configure keys and permissions for untrusted agents, which can then call the proxied endpoints. It is open source and a work in progress :)