Skip to content

TokenFuse v0.1.0 — first public release

Choose a tag to compare

@TAIPANBOX TAIPANBOX released this 02 Jul 18:05
· 482 commits to main since this release
0788673

TokenFuse — runtime control for AI agents. A drop-in proxy that enforces per-run budgets, catches runaway loops, and cuts the circuit before the bill — with a live kill-switch. Observability shows the fire; TokenFuse is the extinguisher.

Run it

# observe only (safe drop-in)
docker run -p 4100:4100 ghcr.io/taipanbox/tokenfuse
# actually enforce (return 402 on a breach)
docker run -p 4100:4100 -e TOKENFUSE_MODE=enforce \
  -e TOKENFUSE_UPSTREAM=https://api.anthropic.com/v1/messages \
  ghcr.io/taipanbox/tokenfuse

Point your agent at http://localhost:4100, add x-fuse-run-id + x-fuse-budget-usd headers. Full Get started.

Highlights

  • Per-run + hierarchical sub-agent budgets (reserve→settle, integer microdollars); 402 on breach. TOKENFUSE_MODE = shadow|warn|enforce.
  • Loop/runaway detection; policy modes; optional sandboxed WASM policies.
  • Security: agent firewall/taint, DLP secret scanning, MCP scanner + rug-pull lockfile.
  • Semantic cache, backtesting, Parquet trace + tokenfuse sql, OTel, tokenfuse top TUI, Python SDK.
  • eBPF Radar for shadow-agent discovery (Linux).
  • HA: raft-replicated budget ledger (openraft) — survives node crash, linearized enforcement across gateways.
  • Portable container image on GHCR; sub-ms decision path (~1 ms p50 / ~2 ms p99 on the wire).

🤖 Generated with Claude Code