Refuse intercepts package-manager commands and blocks known-vulnerable installs before files reach disk, including commands run by coding agents. It supports npm, pip, cargo, gem, go, and 13 other managers. The open-source service is self-hostable in one Docker container.
Ask the makers a question, share feedback or tell others how you use Refuse.
Sign in to comment, ask the makers a question or share useful feedback.
Manage server access with a wallet-based SSH workflow
Watch MCP tool activity and enforce the calls you permit
Encrypt text inside the tools where your team works
No comments yet. Be the first to share your thoughts on Refuse.