AgentVeil
Routed action control for risky AI-agent actions.
AgentVeil's public product path is action control for AI-agent workflows: project connectors, MCP Proxy routing, approval / redirect / block decisions, and bounded local evidence.
For the action-control path, install the MCP Proxy package:
pip install agentveil-mcp-proxy
Quick Start
Route MCP tool calls through AgentVeil:
pip install agentveil-mcp-proxy
agentveil-mcp-proxy init --quickstart-filesystem ./sandbox
agentveil-mcp-proxy doctor --full
agentveil-mcp-proxy run
MCP Proxy gates only tool calls routed through the proxy. It does not control host shell, IDE-native edits, direct git/pip commands, or other actions that bypass the proxy. Actions not routed through AgentVeil are not classified or logged.
Python SDK and advanced protocol primitives
Advanced Python SDK package: agentveil.
The root Python SDK remains available for advanced protocol primitives: local DID identity, delegation receipts, receipt helpers, credential checks, advisory reputation, and optional framework adapter modules when their framework dependencies are installed.
Run a local SDK-only identity and delegation check with no server required:
from datetime import timedelta
from agentveil import AVPAgent
owner = AVPAgent.create(mock=True, name="workflow-owner")
agent = AVPAgent.create(mock=True, name="demo-agent")
agent.register(display_name="Demo Agent")
delegation = owner.issue_delegation_receipt(
agent_did=agent.did,
allowed_categories=["deploy"],
valid_for=timedelta(minutes=15),
)
verification = agent.verify_delegation_receipt(delegation)
print("delegation valid:", verification["valid"])
print("scope:", verification["scope"][0]["value"])
What AgentVeil Provides
- routed action decisions for allow, approval-required, or block outcomes;
- approval routing for sensitive routed requests;
- bounded evidence for local review and offline checks;
- local privacy defaults for MCP Proxy;
- protocol primitives for DID identity, delegation receipts, receipt helpers, credential checks, and optional framework adapter modules when their framework dependencies are installed.
Resources
- Full GitHub README
- MCP Proxy README
- Security Model
- Data Handling
- Customer Integration guide
- AgentVeil website
License
The agentveil package is MIT licensed. The separate agentveil-mcp-proxy
package is source-available under Business Source License 1.1. See the
licensing boundary.
1 maintainer
Release files for agentveil 0.7.23
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| agentveil-0.7.23.tar.gz | 157.6 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| agentveil-0.7.23-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 257.4 kB
Release files / agentveil-0.7.23.tar.gz
| Download URL | agentveil-0.7.23.tar.gz |
|---|---|
| Size | 157.6 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
ebd23331c8379d52e6fee04caf1b71ab8862f1bedcb3928a4e4393b6c10da423
|
|
BLAKE2b-256 checksum How to use checksums |
0fca9dac9cc64711985713c740ee341a17db657738cda728bde8df30bc4e77ac
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.13.13
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Aug 8, 2026.
Transparency logRelease files / agentveil-0.7.23-py3-none-any.whl
| Download URL | agentveil-0.7.23-py3-none-any.whl |
|---|---|
| Size | 99.8 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
c732645c3873d7f604f2cb972ad6f2a30506c207cf5e7eb5e25669313b35ee03
|
|
BLAKE2b-256 checksum How to use checksums |
c8cc51682dab07d82758d0686ed118689338112dd549d7cd29e926cabe6f01a7
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.13.13
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Aug 8, 2026.
Transparency log
