Built a middleware that scans CrewAI/LangChain agent API calls for PII before they reach the target API

Been building with CrewAI for a few months. Had a support agent that reads Jira tickets and posts summaries to Slack. One ticket had a customer's SSN in the description. The agent tried to post it straight to Slack.

So I built an inline gateway that sits between the agent and any API it calls. It scans every request for PII, secrets, and threats before forwarding. If it finds PII, instead of blocking the whole request, it strips the sensitive data and forwards a clean version. The Slack message still gets posted, but the SSN is replaced with a redaction token.

Also handles the worst case. Tested with a rogue agent trying to steal creds, escalate IAM privileges, exfiltrate data. All blocked.

14-min demo with real Jira and Slack APIs: https://vimeo.com/1179128874

Python SDK integrates in about 5 lines. Works with any agent that makes HTTP calls.

Happy to answer questions about the implementation.