
Vault by HashiCorp
Infisical
Airlock
Doppler
Pipelock
DhiWise
Tragentics
AgentLock is a security gateway for AI agents: agents request, you approve on your phone. Zero-knowledge key vault, full audit trail, free plan available.

FriendlyData
Infer SQL queries from plain-text questions and table headers.

Which is more popular?
Based on our record, mlsql seems to be more popular. It has been mentioned 2 times since March 2021.
Website, pricing, platforms and company facts side by side.
|
|
|
|
|---|---|---|
| Website | agentlock.net | github.com |
| Pricing | — | |
| Platforms | — | |
| Company | Startup from Switzerland · 1 - 9 employees | — |
| Listed in |
In their own words, as submitted to SaaSHub.


AgentLock is a security gateway between AI agents and the services they touch. An agent sends its intended action - an HTTP call, an MCP tool call, a browser session, an SSH command - through AgentLock, where a policy decides whether it runs, is blocked, or needs human approval. Approvals arrive...
No description of mlsql yet.
What each product offers, as listed by its team.


No features have been listed yet.
An editorial look at what each product does well and who it suits.


No analysis of AgentLock yet.
Overall verdict
Why this product is good
Recommended for
How often each product is chosen within a category, 0–100% relative to the other.


As answered by people managing AgentLock and mlsql.
AgentLock's answer
AgentLock sits between the agent and the outside world instead of trusting the agent to behave. Every HTTP call, MCP tool call, browser action or SSH command becomes a request that a policy decides on, and anything sensitive waits for a human approval that arrives on the phone. Credentials live in the vault and are injected only at execution time, so an agent can use a key without ever seeing it - and if nobody approves in time, the action simply does not happen.
AgentLock's answer
A secrets manager stores keys, but once an agent holds one, nothing stops it from making the wrong call. AgentLock covers both halves: the encrypted vault plus a gateway with policies, human approval, automatic redaction, a full timeline and undo for supported actions. It is available as an MCP server and an SDK, so an existing agent can be routed through it without a rewrite, and the free plan already covers 100 actions a month with one agent.
AgentLock's answer
Developers who run autonomous agents against real systems - deployments, payments, mail, customer data - and want an audit trail and a stop button instead of hoping the prompt holds. Small teams also use it to let an agent work with shared credentials without handing the keys to every team member or to the model itself.
AgentLock's answer
TypeScript across the stack: a React dashboard on Vercel, Supabase with Postgres, Auth and Edge Functions for data, policies and the encrypted vault, a self-hosted runner for actions that need a private network, React Native for the iOS and Android approval app, and Stripe for billing.
Share your experience with using AgentLock and mlsql. For example, how are they different and which one is better?
Recommendations tracked on public social media and blogs since March 2021.


Tracking AgentLock since Sep 2026.
I am working on a project that requires me to take user input (as English) and return SQL queries. We will eventually be working with multiple datasets, which is why the valuenet over at https://github.com/paulfitz/mlsql ended up being... Source: over 4 years ago
I found this great resource here: https://github.com/paulfitz/mlsql. Source: almost 5 years ago
When comparing AgentLock and mlsql, you can also consider the following products.



Infisical is an open source, end-to-end encrypted platform that lets you securely sync secrets and configs across your engineering team and infrastructure
Compare Infisical to AgentLock or mlsql:


Doppler is the multi-cloud SecretOps Platform developers and security teams trust to provide secrets management at enterprise scale.
Compare Doppler to AgentLock or mlsql:
Pipelock is an open source AI agent firewall and egress proxy. Inspect HTTP, MCP, and WebSocket traffic for leaks, injection, and tool poisoning.
Compare Pipelock to AgentLock or mlsql: