AI Summary

Brex created an internal platform named CrabTrap to manage AI agents’ use of real credentials such as API keys and OAuth tokens. The system operates as an open‑source HTTP/HTTPS proxy that intercepts all network traffic, evaluates policy rules, and employs a large‑language‑model judge to approve or deny agent requests. This approach replaces traditional rule‑first guardrails, which Brex found insufficient for containing agent behavior at enterprise scale. The solution builds its policy by observing what agents actually do rather than predefining rules.

AI summaries can be wrong sometimes—always verify important details using the source article.