What problem does it solve?
Earl prevents prompt-injection and secret leakage by routing API calls, database queries, and shell commands through reviewed HCL templates instead of exposing raw endpoints or credentials to an LLM.
Core Features & Use Cases
- Discovery: Search installed templates to find the exact provider.command that matches an intent (e.g., list pull requests, search repos, send a Slack message).
- Safe Execution: Reads secrets from the OS keychain, enforces strict flag ordering and explicit approval for write-mode operations, and returns structured JSON results.
- Integration: Works as a CLI or via MCP endpoints to let agents call deterministic, reviewed tools without seeing template bodies.
Quick Start
Use Earl to search for a template matching "list github pull requests" and call the matched provider.command with the needed parameters.