Stacktrace gives AI agents autonomy without losing control. It supervises agent sessions in real time, detects actions that violate your intent or company policy, and blocks them, requires approval, or steers the agent back on track. It launched on November 5, 2026, as a Y Combinator Fall 2026 company, and is a live product, not a waitlist.
What it does
Stacktrace reads every tool call made by Claude Code, Codex, Cursor and Devin, and steers agents away from risky calls before damage is done. Its 21 detection rules cover reliability, operations, cost and security, including credential and PII egress, destructive actions and cost runaway. Each rule can be Off, Detect or Block, and six of them can block pre-execution. One policy covers MCP servers, plugins, skills, commands and sub-agents, and token budgets can be set across vendors.
The product comes in two parts. Stacktrace Fleet is one console for every coding agent an organisation runs. Stacktrace Agent Gateway safely opens a business to customers’ personal agents through MCP, verifying agent identity, holding consequential actions for explicit approval, and keeping a masked, audit-grade record.
Privacy is built in: transcripts, prompts and tool output stay in the customer’s environment, and Fleet receives only findings and inventory, which expire after 90 days.
Key features
- Reads every tool call from Claude Code, Codex, Cursor and Devin in real time
- 21 detection rules across reliability, operations, cost and security, each Off, Detect or Block
- One policy across MCP servers, plugins, skills, commands and sub-agents
- Token budgets across vendors
- Privacy-preserving: transcripts and prompts stay in your environment; findings expire after 90 days
- Findings delivered to Slack, signed webhooks (JSON, HMAC-SHA256) to SIEMs such as Splunk, Datadog and Sentinel, or into the running Claude Code session; CSV export
- Agent Gateway: agent identity verification, approval holds on consequential actions, masked audit-grade records
- SSO and MDM install on every Mac; built on MCP authorization (OAuth 2.1), the Personal Agent Protocol and OpenTelemetry
Who it is for
Engineering and security teams rolling out coding agents across an organisation, and businesses that want to let customers’ personal agents act on their behalf without handing over the keys. If your agents already touch production systems, Stacktrace is built for exactly that risk.
Pricing
The local sidecar is free, with no account. Team is also free: unlimited users and 200 session-hours a month. Beyond that, Enterprise is custom and billed annually; the official site asks you to book a demo. Prices may change; check stacktrace.ai for the current details.
Information based on the official stacktrace.ai website, checked November 6, 2026.
