LibreAI / Local LLM / api-relay-audit
// local-llm · toby-bridges/api-relay-audit

api-relay-audit

Local security auditor for AI API relays — catches injection and swaps.

💎 Hidden gem★ 865 stars⑂ 82 forksAGPL-3.0updated 2026-10
▦ visual — this project's README ships no embeddable screenshot,
so here's a placeholder. The guide below is complete regardless.
// project facts

Project facts

api-relay-audit is an open-source local llm project by toby-bridges (toby-bridges/api-relay-audit on GitHub). It has 865 GitHub stars and 82 forks, is released under the AGPL-3.0 license, and was last updated on GitHub on 3 October 2026.

GitHub stars
865
Forks
82
License
AGPL-3.0
Last updated on GitHub
3 October 2026
Category
Local LLM
Listing
Hidden gem — a shorter page for a lesser-known project
Official site
Official site
// how it works

How it works

  1. Install the auditor

    Set it up from the repo.

  2. Point at your relay

    Target your AI API proxy.

  3. Run the audit

    It probes for injection, swaps, and leaks.

  4. Fix findings

    Harden the relay based on results.

// features

Why people love it

Injection detection

Finds prompt injection in the relay path.

Model substitution

Catches silent model swaps.

Tool-call checks

Detects rewritten tool calls.

Error leakage

Spots sensitive data in errors.

SSE anomalies

Monitors streaming irregularities.

Local audit

Runs on your machine, privately.

Advertisement
// run it

Run it yourself

  1. Step 1 — Clone the repo

    Download the source and move into the project folder.

    git clone https://github.com/toby-bridges/api-relay-audit.git
    cd api-relay-audit
  2. Step 2 — Check the README

    Every project documents its own setup; start with install requirements.

    cat README.md | head -60
  3. Step 3 — Run it

    Follow the project's launch command — Docker, pip, npm, or a binary release.

    # see README for the exact launch command
// use cases

What you can build

Advertisement
// faq

Questions, answered

What is an AI API relay?

A proxy that forwards your app's calls to model providers, sometimes adding markup or risk.

What does AGPL-3.0 mean for me?

Commercial use is allowed, but network use of modified versions requires sharing source.

Can it audit any proxy?

It targets AI API relays and LLM proxies; check the docs for compatibility.

Does it need my API keys?

It audits the relay path; check the docs for credential handling.

Is the audit really local?

Yes, it is designed to run on your own machine.

// keep exploring

Similar tools

Local LLM

litellm

The fastest, litest AI Gateway. Rust core with Python SDK. Call 100+ LLM APIs in OpenAI (or native) format with cost tracking, guardrails, load balancing, an…

★ 60.1k starsCustom
View guide →
Local LLM

exo

Run frontier AI locally.

★ 47.7k starsApache-2.0
View guide →
Local LLM

Soup

Fine-tune LLMs from one YAML. Layer streaming trains an 8B model on a 4 GB laptop GPU.

★ 8.1k starsApache-2.0
View guide →
Local LLM

meridian

Local API bridge to run Claude and Antigravity inside other coding clients.

★ 2.1k starsCustom
View guide →
Local LLM

Text Generation Webui

Open-source desktop app for local LLMs. Text, vision, tool-calling, OpenAI/Anthropic-compatible API. 100% private

★ 47.7k starsAGPL-3.0
View guide →
Local LLM

ownmem

Open source, Git-native memory for AI coding agents - deterministic local recall

★ 423 starsApache-2.0
View guide →
// alternatives

Alternatives in Local LLM

The most-starred other Local LLM projects in the LibreAI catalogue — the realistic shortlist if api-relay-audit is not the right fit.

Get api-relay-audit

Free and open — grab the source, star the repo, and start creating.