CyberPassAI Security
ENControl Center ↗Request a pilot

Endpoint channel / Windows-first beta

Central policy on the endpoint

Endpoint Connector links desktop AI agents, IDE clients and the managed browser extension to the central Gateway. Provider keys are never sent to the device.

Windows betaBrowser beta
AI proxy127.0.0.1:8765/v1
MCP proxy127.0.0.1:8765/mcp
Windows statusTray application
ServerCentral on-prem Gateway
01 / HOW IT WORKS

Local entry point.
Central decision.

Connector listens only on loopback. It attributes the device and sends the request for central inspection.

EnrollAn administrator creates a one-time expiring token.
ConnectThe Windows service receives its own device identity.
InspectThe agent or extension calls the local proxy.
EnforceGateway applies policy and records device attribution.
02 / TRUST BOUNDARY

Provider credentials
stay on the server.

The extension never sees the device token. Connector stores it under %ProgramData% with administrator/SYSTEM ACLs.

MANAGED WINDOWS DEVICE
01ADesktop agent / IDEOpenAI-compatible base URL
01BChrome / Edgemanaged extension beta
02Endpoint Connector127.0.0.1:8765 · device identity
03Central Gatewaypolicy · DLP · Guard · route
DEVICE STORESDevice token only
SERVER STORESProvider credentials
03 / CHANNELS

One Connector.
Multiple clients.

OpenAI-compatible and MCP-capable clients use different loopback URLs on one managed Connector. The browser channel uses separate DOM adapters.

AI agents

Set http://127.0.0.1:8765/v1 and a non-empty placeholder API key.

Beta

IDE & MCP clients

An OpenAI-compatible client uses /v1, while an MCP-capable IDE uses http://127.0.0.1:8765/mcp/<slug>. Tool policy is configured centrally.

Beta

AI web chats

The extension checks supported text forms through Connector before submission.

Beta
04 / CURRENT LIMITS

Beta means
known boundaries.

Preventing bypass requires more than an agent: firewall, DNS and MDM/GPO must block direct LLM egress.

CapabilityStatusBoundary
Windows service + trayBetaCI-built ZIP, PowerShell installer and status tray; not yet a signed MSI.
Browser promptsBetaA DOM adapter for supported sites. It is not a transparent TLS proxy.
File uploadBetaTXT, CSV, MD, JSON, PDF, DOCX and XLSX are inspected in memory; encrypted, embedded and unsupported formats are blocked.
macOS/Linux endpointPlannedThe central server stack runs on Linux; the desktop package is currently Windows-first.
Direct egress preventionCustomer controlEnforced by the customer firewall, DNS and MDM, not by Connector alone.

Validate the channel on one device group.

For an endpoint pilot, we agree the Windows build, MDM/GPO, supported clients and fail-open/fail-closed mode.

Request an endpoint pilot →