OpenWAF Egress is now open source under the Apache License 2.0. Agents hold a placeholder token instead of the provider key; the gateway checks every request against the agent's allowed targets, an SSRF check, 27 prompt-injection detectors and data-leak patterns, and only then injects the real key from OpenBao or HashiCorp Vault. It ships as a container for linux/amd64 and linux/arm64 and as Linux and macOS binaries.
See the OpenWAF Egress overview and the quickstart.