Crabtrap Llm Proxy

CrabTrap LLM Proxy

Skill by ara.so — Daily 2026 Skills collection.

CrabTrap is a transparent HTTP/HTTPS forward proxy that sits between AI agents and external APIs. Every outbound request is intercepted, checked against deterministic static rules, then evaluated by an LLM judge against a natural-language security policy. Blocked requests return a 403 with a reason; all decisions are logged to PostgreSQL.

Architecture Overview

Agent → CrabTrap Proxy (:8080) → [Static Rules] → [LLM Judge] → External API
                ↓
         Admin UI (:8081)
                ↓
           PostgreSQL

Key concepts:

• Static rules — deterministic prefix/exact/glob URL matching, checked first (no LLM call)
• LLM judge — natural-language policy evaluated only when no static rule matches
• Audit log — every request, decision, and response stored in PostgreSQL
• SSRF protection — blocks RFC 1918, loopback, link-local, and other private ranges

Installation

Docker Compose (Recommended)