TokenFuse v0.1.0 — first public release
TokenFuse — runtime control for AI agents. A drop-in proxy that enforces per-run budgets, catches runaway loops, and cuts the circuit before the bill — with a live kill-switch. Observability shows the fire; TokenFuse is the extinguisher.
Run it
# observe only (safe drop-in)
docker run -p 4100:4100 ghcr.io/taipanbox/tokenfuse
# actually enforce (return 402 on a breach)
docker run -p 4100:4100 -e TOKENFUSE_MODE=enforce \
-e TOKENFUSE_UPSTREAM=https://api.anthropic.com/v1/messages \
ghcr.io/taipanbox/tokenfusePoint your agent at http://localhost:4100, add x-fuse-run-id + x-fuse-budget-usd headers. Full Get started.
Highlights
- Per-run + hierarchical sub-agent budgets (reserve→settle, integer microdollars); 402 on breach.
TOKENFUSE_MODE = shadow|warn|enforce. - Loop/runaway detection; policy modes; optional sandboxed WASM policies.
- Security: agent firewall/taint, DLP secret scanning, MCP scanner + rug-pull lockfile.
- Semantic cache, backtesting, Parquet trace +
tokenfuse sql, OTel,tokenfuse topTUI, Python SDK. - eBPF Radar for shadow-agent discovery (Linux).
- HA: raft-replicated budget ledger (openraft) — survives node crash, linearized enforcement across gateways.
- Portable container image on GHCR; sub-ms decision path (~1 ms p50 / ~2 ms p99 on the wire).
🤖 Generated with Claude Code