Secure · Agents · by · Design
A registry for QuickAgents
AI agents are getting more common and more useful every day. We're starting to give them far more access and authorization than we originally planned for. Memory systems are enabled by default, so it can be difficult to work with sensitive data without a cleanup process afterwards. And we keep doing the tasks our agents could perform, rather than give them too much access and risk it being used against us, slowing down adoption and leaving utility on the table.
To solve this we have QuickAgents, and Agentry. QuickAgents are the self-contained agent manifests, and Agentry is the system that runs them: the agent gets a disposable container, and every tool it can use is served by a secured MCP gateway. Only the tools the manifest declared are wired up, and traffic leaves only through a secure network proxy, host by declared host. You can run the most sensitive workloads with a QuickAgent without the headaches and risks that come from just dumping your data into Claude Desktop.
Agentry is, and will remain free to download and run agents against your own self hosted or subscription based LLM, as well as limited fully scanned agent submission. The core and end user applications are open source and welcome contribution.
What is a QuickAgent
A QuickAgent is a self-contained, single-use agent format: it runs with all the access it needs to do its task and nothing more, built so that the credentials and keys it uses cannot be turned to anything unintended.
It ships as a small, reviewable package. The manifest declares what it is and what it may touch: network egress, filesystem access, subprocess execution, and the secrets it needs, named but never carried. The rest is instruction content, a skill or a system prompt, and where tools are needed, a small MCP server with a lockfile.
At run time the Agentry runner verifies the package, then starts it with nothing: a disposable container on an internal network with no route to the internet, no credentials, and no tools of its own. Every tool it can use is served by a run-scoped MCP gateway, and only the tools the manifest declared are wired up. Secrets never enter the agent container — where a QuickAgent declares an API token or an endpoint, the gateway and the egress proxy receive it by name, and the agent reaches it only through that declared path, host by declared host. Anything not declared has no route at all. When the task ends, every container is removed and the agent is gone, leaving a receipt that records what ran.
How scanning works
Every QuickAgent is scanned using a rigorous 10 stage process for prompt injection, credential stealing, undeclared capabilities, secret network access and other forms of potential risk and exposure to you and your data. All agents found on the Agentry have passed the scanning process and are safe as can be. After a QuickAgent passes the scanning process is signed, and the Agentry apps will check that signature before running. More detail on the Trust & Security page.
- S1Inventory & hygiene
- S2Secrets
- S3Hidden & obfuscated content
- S4Injection signatures
- S5AI Review
- S6Scripts against the manifest
- S7Declared MCP servers
- S8Metadata & publisher signals
- S9Release-diff risk
- S10Report assembly
Most installed this month
- blaktron/vuln-reachability-auditautonomous
Audits a codebase's dependencies against OSV.dev, traces reachability in the code, and returns an HTML report with fix suggestions. · 59 installs in 30 days
- blaktron/binary-reverse-engineerautonomous
Reverse-engineers a binary file using a reverse engineering knowledge pack and returns recovered source code plus a report. · 37 installs in 30 days
- blaktron/resume-reformatautonomous
Reviews a Word or PDF resume against current ATS best practices and returns it reformatted as a print-ready HTML file to save as PDF. · 25 installs in 30 days
- blaktron/vultr-setup-wizardinteractive
Walks you through signing up for Vultr and building a secure, project-specific environment, making the changes itself when you provide an… · 18 installs in 30 days
- blaktron/resume-rebuilderautonomous
Rebuilds your PDF or Word resume into an ATS-friendly single-column PDF laid out for your career band, keeping your own words. · 13 installs in 30 days
- blaktron/simple-chat-botinteractive
Chats with you in plain conversational turns, answering from general knowledge with no tools, files, network or keys of any kind. · 12 installs in 30 days
Ranked by installs, which is a popularity signal and not a safety one. Every one of them still has a report worth reading.
Every version is scanned
Deterministic detectors for invisible Unicode, injection signatures, and undeclared capabilities, plus dependency and release-diff analysis. No flag, plan, or role skips it.
The QuickAgent declares capabilities up front
Network egress, filesystem access, subprocess execution, and expected secrets are part of the manifest. Your runtime can enforce least privilege and keep your data safe.
End to end trust
Each QuickAgent is locked against its capabilities and cannot stray, confirmed before publication.