Trust before action

Don’t let an agent call blind.

PREFLIGHT checks the endpoint before an autonomous agent connects, pays, or acts.

Run the proof ↓ Read the code ↗
Three requests. Three decisions.

Known-good endpoint

allow path
example.com

A normal endpoint with a trusted certificate.

Expired certificate

block path
expired.badssl.com

Reachable does not mean safe to trust.

Private target

SSRF guard
127.0.0.1

Attacker-controlled destinations never get a free pass.

Agent request

“Call this external URL and continue if it is trustworthy.”

PREFLIGHT verdict

Machine-readable decision, certificate facts, and a reason that can be audited.