agentveil

AgentVeil

Routed action control for risky AI-agent actions.

AgentVeil's public product path is action control for AI-agent workflows: project connectors, MCP Proxy routing, approval / redirect / block decisions, and bounded local evidence.

For the action-control path, install the MCP Proxy package:

pip install agentveil-mcp-proxy

Quick Start

Route MCP tool calls through AgentVeil:

pip install agentveil-mcp-proxy
agentveil-mcp-proxy init --quickstart-filesystem ./sandbox
agentveil-mcp-proxy doctor --full
agentveil-mcp-proxy run

MCP Proxy gates only tool calls routed through the proxy. It does not control host shell, IDE-native edits, direct git/pip commands, or other actions that bypass the proxy. Actions not routed through AgentVeil are not classified or logged.

Python SDK and advanced protocol primitives

Advanced Python SDK package: agentveil.

The root Python SDK remains available for advanced protocol primitives: local DID identity, delegation receipts, receipt helpers, credential checks, advisory reputation, and optional framework adapter modules when their framework dependencies are installed.

Run a local SDK-only identity and delegation check with no server required:

from datetime import timedelta
from agentveil import AVPAgent

owner = AVPAgent.create(mock=True, name="workflow-owner")
agent = AVPAgent.create(mock=True, name="demo-agent")
agent.register(display_name="Demo Agent")

delegation = owner.issue_delegation_receipt(
    agent_did=agent.did,
    allowed_categories=["deploy"],
    valid_for=timedelta(minutes=15),
)
verification = agent.verify_delegation_receipt(delegation)

print("delegation valid:", verification["valid"])
print("scope:", verification["scope"][0]["value"])

What AgentVeil Provides

• routed action decisions for allow, approval-required, or block outcomes;
• approval routing for sensitive routed requests;
• bounded evidence for local review and offline checks;
• local privacy defaults for MCP Proxy;
• protocol primitives for DID identity, delegation receipts, receipt helpers, credential checks, and optional framework adapter modules when their framework dependencies are installed.

Resources

• Full GitHub README
• MCP Proxy README
• Security Model
• Data Handling
• Customer Integration guide
• AgentVeil website

License

The agentveil package is MIT licensed. The separate agentveil-mcp-proxy package is source-available under Business Source License 1.1. See the licensing boundary.