Open-source access-control checker for retrieval-based AI applications [P]
Heat trend
Collecting trend data
The percentage is based on available heat signal, not comment count or independent people.
A new open-source tool has been developed to check access control in Retrieval-Augmented Generation (RAG) applications. This tool identifies if a RAG application retrieves documents that a user should not have access to. It supports both offline test cases and live HTTP API testing, including authentication methods like bearer tokens and API keys. The developer is seeking engineers to test the tool in non-sensitive environments to gather feedback and identify potential improvements.
Hey Guys,
I built a small open-source tool that checks whether a RAG application retrieves documents a user shouldn’t have access to.
It supports offline test cases and live HTTP API testing with bearer token/API-key auth.
I’m looking for a few engineers to try it on a test or non-sensitive environment and tell me whether it catches anything useful or what would make it better.
GitHub: https://github.com/InfraGuard-Labs/rag-access-check