agentmetry

Agentmetry is an open-source endpoint flight recorder specifically designed for AI coding agents, capturing detailed logs of tool calls, approvals, and denials to provide visibility into agent actions. Its primary use case is enhancing incident response by generating a comprehensive JSONL trail and correlating events with MITRE ATT&CK tactics, issuing critical alerts when a series of actions could signify an attack. The tool can function locally on Windows and Linux machines, with optional forwarding to SIEM solutions like Loki, Elastic, Splunk, or Google SecOps for centralized monitoring.