CrabTrap: An LLM-as-a-judge HTTP proxy to secure agents in production

Hacker News / 4/22/2026

📰 NewsDeveloper Stack & InfrastructureSignals & Early TrendsIdeas & Deep AnalysisTools & Practical Usage

Key Points

  • CrabTrap is presented as an HTTP proxy that uses an LLM as a “judge” to help secure AI agents when they are running in production.
  • The approach focuses on inserting an additional inspection/control layer into the agent’s HTTP traffic, rather than relying only on upstream safeguards.
  • By routing requests and evaluating them with an LLM-based rubric, CrabTrap aims to detect or mitigate risky behaviors before they reach sensitive systems.
  • The article highlights the project’s open-source nature and frames it as a practical deployment pattern for production-grade agent security.
  • Overall, it emphasizes using LLM judgment in an inline proxy position to improve safety and governance for agent workflows.