The Agent-Native Index

agent-native · Observability & Tracing · Verified 2026-09-26

numbat

Listed on The Agent-Native Index

Endpoint visibility into AI agent activity, with local detection, optional pre-action blocking, and forensic reconstruction

Website ↗ Repo ↗ Full dossier ↗

What it does

numbat is endpoint observability and policy infrastructure specifically for AI agents. It discovers supported agent installations, reconstructs existing sessions from on-disk artifacts, receives live activity from agent-native hooks/plugins or OTLP/HTTP, and normalizes all sources into one closed event vocabulary. A shared CEL engine evaluates both live and at-rest events for single-step and multi-step behaviors.

The output is a versioned NDJSON evidence stream: events, findings, enforcement decisions, indicators, and scan summaries retain endpoint, source agent, session/run, tool-call, and evidence references. timeline reconstructs session activity; case build creates portable evidence bundles with SHA-256 manifests. Optional enforcement can ask supported synchronous pre-action hooks to deny a clean match, while monitor-only behavior remains the default and every shipped rule is non-enforcing.

Coverage is deliberately bounded by each host’s published artifacts and hooks. At-rest reconstruction cannot recover unpersisted actions, findings are not proof of compromise, and hook enforcement is not a complete endpoint security boundary.

Agent-facing interfaces

How agents onboard

Interaction pattern: endpoint CLI + agent hooks/plugins + OTLP/HTTP

go install github.com/perplexityai/numbat/cmd/numbat@latest
numbat agents
numbat scan --agent codex

See the full onboarding section in the dossier.

Protocol surface

Interface Detail
CLI agents, scan, timeline, collect, ship, hook, rules, case, and version; JSON/NDJSON-oriented automation and stable exit behavior
Native agent integrations Generated hooks, plugins, or extensions for supported CLI, IDE, desktop, and gateway agents
OTLP/HTTP ingest Local collector for supported protobuf log exporters; default endpoint pattern 127.0.0.1:4318/v1/logs
NDJSON output Version 0.2.0 typed records to stdout or file
HTTP output application/x-ndjson, optional gzip, bearer or HMAC-SHA256 auth; direct delivery is not a durable queue
JSON Schema Per-record and union-stream schemas under docs/schema/v0.2.0/
Rule format YAML rules with CEL expressions, sequence steps, tests, versioning, and optional enforce: true

Verification

Last verified 2026-09-26.

Sources: