Agentmetry — a local-first SIEM and flight recorder for AI coding agents. Captures every tool call, approval, and denial from Cursor, Claude Code, Codex and Antigravity into a MITRE ATT&CK-mapped audit trail, with correlated sequence detection (credential access -> network egress) and forwarders to Loki, Elastic and Splunk. Apache-2.0. Zero egress.

1 stars 0 forks 1 watchers Python Apache License 2.0
agent-monitoring agentmetry ai-agents ai-security audit-log claude-code cursor devsecops dlp llm-security local-first mcp mitre-attack observability security-tools self-hosted siem threat-detection
8 Open Issues Need Help Last updated: Jul 14, 2026

Open Issues Need Help

View All on GitHub
enhancement good first issue

Agentmetry — a local-first SIEM and flight recorder for AI coding agents. Captures every tool call, approval, and denial from Cursor, Claude Code, Codex and Antigravity into a MITRE ATT&CK-mapped audit trail, with correlated sequence detection (credential access -> network egress) and forwarders to Loki, Elastic and Splunk. Apache-2.0. Zero egress.

Python
#agent-monitoring#agentmetry#ai-agents#ai-security#audit-log#claude-code#cursor#devsecops#dlp#llm-security#local-first#mcp#mitre-attack#observability#security-tools#self-hosted#siem#threat-detection
enhancement help wanted

Agentmetry — a local-first SIEM and flight recorder for AI coding agents. Captures every tool call, approval, and denial from Cursor, Claude Code, Codex and Antigravity into a MITRE ATT&CK-mapped audit trail, with correlated sequence detection (credential access -> network egress) and forwarders to Loki, Elastic and Splunk. Apache-2.0. Zero egress.

Python
#agent-monitoring#agentmetry#ai-agents#ai-security#audit-log#claude-code#cursor#devsecops#dlp#llm-security#local-first#mcp#mitre-attack#observability#security-tools#self-hosted#siem#threat-detection
documentation good first issue

Agentmetry — a local-first SIEM and flight recorder for AI coding agents. Captures every tool call, approval, and denial from Cursor, Claude Code, Codex and Antigravity into a MITRE ATT&CK-mapped audit trail, with correlated sequence detection (credential access -> network egress) and forwarders to Loki, Elastic and Splunk. Apache-2.0. Zero egress.

Python
#agent-monitoring#agentmetry#ai-agents#ai-security#audit-log#claude-code#cursor#devsecops#dlp#llm-security#local-first#mcp#mitre-attack#observability#security-tools#self-hosted#siem#threat-detection
enhancement good first issue

Agentmetry — a local-first SIEM and flight recorder for AI coding agents. Captures every tool call, approval, and denial from Cursor, Claude Code, Codex and Antigravity into a MITRE ATT&CK-mapped audit trail, with correlated sequence detection (credential access -> network egress) and forwarders to Loki, Elastic and Splunk. Apache-2.0. Zero egress.

Python
#agent-monitoring#agentmetry#ai-agents#ai-security#audit-log#claude-code#cursor#devsecops#dlp#llm-security#local-first#mcp#mitre-attack#observability#security-tools#self-hosted#siem#threat-detection
good first issue dlp-rule

Agentmetry — a local-first SIEM and flight recorder for AI coding agents. Captures every tool call, approval, and denial from Cursor, Claude Code, Codex and Antigravity into a MITRE ATT&CK-mapped audit trail, with correlated sequence detection (credential access -> network egress) and forwarders to Loki, Elastic and Splunk. Apache-2.0. Zero egress.

Python
#agent-monitoring#agentmetry#ai-agents#ai-security#audit-log#claude-code#cursor#devsecops#dlp#llm-security#local-first#mcp#mitre-attack#observability#security-tools#self-hosted#siem#threat-detection
good first issue dlp-rule

Agentmetry — a local-first SIEM and flight recorder for AI coding agents. Captures every tool call, approval, and denial from Cursor, Claude Code, Codex and Antigravity into a MITRE ATT&CK-mapped audit trail, with correlated sequence detection (credential access -> network egress) and forwarders to Loki, Elastic and Splunk. Apache-2.0. Zero egress.

Python
#agent-monitoring#agentmetry#ai-agents#ai-security#audit-log#claude-code#cursor#devsecops#dlp#llm-security#local-first#mcp#mitre-attack#observability#security-tools#self-hosted#siem#threat-detection
good first issue detection-rule

Agentmetry — a local-first SIEM and flight recorder for AI coding agents. Captures every tool call, approval, and denial from Cursor, Claude Code, Codex and Antigravity into a MITRE ATT&CK-mapped audit trail, with correlated sequence detection (credential access -> network egress) and forwarders to Loki, Elastic and Splunk. Apache-2.0. Zero egress.

Python
#agent-monitoring#agentmetry#ai-agents#ai-security#audit-log#claude-code#cursor#devsecops#dlp#llm-security#local-first#mcp#mitre-attack#observability#security-tools#self-hosted#siem#threat-detection
good first issue detection-rule

Agentmetry — a local-first SIEM and flight recorder for AI coding agents. Captures every tool call, approval, and denial from Cursor, Claude Code, Codex and Antigravity into a MITRE ATT&CK-mapped audit trail, with correlated sequence detection (credential access -> network egress) and forwarders to Loki, Elastic and Splunk. Apache-2.0. Zero egress.

Python
#agent-monitoring#agentmetry#ai-agents#ai-security#audit-log#claude-code#cursor#devsecops#dlp#llm-security#local-first#mcp#mitre-attack#observability#security-tools#self-hosted#siem#threat-detection