Zero-trust command proxy for AI agents accessing production
infrastructure.
Read everything. Write nothing... unless authorized.
Install the desktop app or CLI proxy. Reads flow instantly. Writes require your approval.
Iddio is a transparent proxy between your AI agents and your infrastructure. Every command flows through it. Nothing reaches production without classification and policy evaluation.
Every command is classified in real-time. Read operations flow freely. Write operations require escalation through a structured privilege model based on blast radius and reversibility.
Read-only by default. All GET, HEAD, and OPTIONS requests pass through without prompting.
Human-in-the-loop approval for standard write operations. POST, PUT, and PATCH requests are escalated.
Irreversible or sensitive operations requiring operator confirmation. DELETE requests and secret reads.
Highest-risk operations: exec into pods, portforward, attach, proxy, and RBAC mutations. Blocked by default.
Define fine-grained access policies using simple YAML rules. Iddio classifies every request through its tier engine before it reaches your cluster.
# ~/.iddio/policy.yaml
kubectl:
inspect:
- "*.eks.amazonaws.com"
- "*.gke.goog"
default: escalate
groups:
read:
tiers: [observe]
mutate:
tiers: [modify]
delete:
tiers: [sensitive]
admin:
tiers: [break-glass]
exec:
commands: [exec, attach, port-forward]
namespaces:
- names: [prod-*, production]
rules:
allow:
groups: [read]
escalate:
groups: [mutate, delete, admin]
deny:
groups: [exec]
- names: ["*"]
rules:
allow:
groups: [read]
escalate:
groups: [mutate, delete, admin]
deny:
groups: [exec] Your AI agents need infrastructure access to be useful. Iddio makes that access auditable, revocable, and safe by default.
Open-source core. Self-hosted on your infrastructure. Deploy as a single binary in minutes.