Wirken is an open-source command-line tool that serves as a verified switchboard between AI agents and external channels. It is designed for professionals who need accountable agents. The tool addresses the risks that arise when an agent holds credentials, processes input from uncontrolled sources, and executes commands without oversight.
It records every action in an immutable log before execution. Credentials remain isolated from the agent. Reading operations proceed without confirmation while actions that modify data require approval on first use and are remembered thereafter. Operations involving deletion, installation, or credential access always prompt for confirmation. The system prevents hidden instructions in messages, documents, or emails from triggering unauthorized behavior.
Ten channels are supported, including Signal. Installation is available on Linux and macOS through a provided curl script and on Windows via separate documentation. The project is developed by Gebrüder Ottenheimer, carries an MIT license, and is free to use. Documentation covers setup, reference material, and examples.
The name Wirken derives from the German verb meaning to work, to weave, or to have effect.
Wirken sits in PulseGate's Developer Tools category. It focuses on preventing AI agents from silently misusing credentials or executing unauthorized actions from untrusted inputs. Wirken is an open-source project aimed at developers. Wirken is open source under the MIT license. It ships for the web, the command line, macOS, and Linux, and it can be self-hosted.
Gebrüder Ottenheimer builds and maintains Wirken, and it first shipped in 2026. Development happens publicly on GitHub with 159 stars and 543 commits in the last 90 days. Among its 6 catalogued features are immutable action log, credential isolation, and per-action confirmation. It exposes integrations via a public API.
Summary written by a language model from the project’s public pages.
What PulseGate has recorded for this listing
Same category — not a similarity match