AgentVeil
Routed action control for risky AI-agent actions.
AgentVeil's public product path is action control for AI-agent workflows: project connectors, MCP Proxy routing, approval / redirect / block decisions, and bounded local evidence.
For the action-control path, install the MCP Proxy package:
pip install agentveil-mcp-proxy
Quick Start
Route MCP tool calls through AgentVeil:
pip install agentveil-mcp-proxy
agentveil-mcp-proxy init --quickstart-filesystem ./sandbox
agentveil-mcp-proxy doctor --full
agentveil-mcp-proxy run
MCP Proxy gates only tool calls routed through the proxy. It does not control host shell, IDE-native edits, direct git/pip commands, or other actions that bypass the proxy. Actions not routed through AgentVeil are not classified or logged.
Python SDK and advanced protocol primitives
Advanced Python SDK package: agentveil.
The root Python SDK remains available for advanced protocol primitives: local DID identity, delegation receipts, receipt helpers, credential checks, advisory reputation, and optional framework adapter modules when their framework dependencies are installed.
Run a local SDK-only identity and delegation check with no server required:
from datetime import timedelta
from agentveil import AVPAgent
owner = AVPAgent.create(mock=True, name="workflow-owner")
agent = AVPAgent.create(mock=True, name="demo-agent")
agent.register(display_name="Demo Agent")
delegation = owner.issue_delegation_receipt(
agent_did=agent.did,
allowed_categories=["deploy"],
valid_for=timedelta(minutes=15),
)
verification = agent.verify_delegation_receipt(delegation)
print("delegation valid:", verification["valid"])
print("scope:", verification["scope"][0]["value"])
What AgentVeil Provides
- routed action decisions for allow, approval-required, or block outcomes;
- approval routing for sensitive routed requests;
- bounded evidence for local review and offline checks;
- local privacy defaults for MCP Proxy;
- protocol primitives for DID identity, delegation receipts, receipt helpers, credential checks, and optional framework adapter modules when their framework dependencies are installed.
Resources
- Full GitHub README
- MCP Proxy README
- Security Model
- Data Handling
- Customer Integration guide
- AgentVeil website
License
The agentveil package is MIT licensed. The separate agentveil-mcp-proxy
package is source-available under Business Source License 1.1. See the
licensing boundary.
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file agentveil-0.7.21.tar.gz.
File metadata
- Download URL: agentveil-0.7.21.tar.gz
- Upload date:
- Size: 149.4 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.13
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
10c3776f2d3ad36c591c3e814bd8bae3408faf59065e5e5bc973cf20c638e9c8
|
|
| MD5 |
ea3a865fc095b8470aaaef2a1f710e54
|
|
| BLAKE2b-256 |
82605eecb11b5f96b258dfcd757a196a1a405a30d36e0d391165627af17942c1
|
Provenance
The following attestation bundles were made for agentveil-0.7.21.tar.gz:
Publisher:
publish.yml on agentveil-protocol/agentveil-sdk
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
agentveil-0.7.21.tar.gz -
Subject digest:
10c3776f2d3ad36c591c3e814bd8bae3408faf59065e5e5bc973cf20c638e9c8 - Sigstore transparency entry: 2188793794
- Sigstore integration time:
-
Permalink:
agentveil-protocol/agentveil-sdk@878ec6a0f002c8e5b724f0dba1cfa165b6cec835 -
Branch / Tag:
refs/tags/v0.7.30-mcp-proxy - Owner: https://github.com/agentveil-protocol
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish.yml@878ec6a0f002c8e5b724f0dba1cfa165b6cec835 -
Trigger Event:
push
-
Statement type:
File details
Details for the file agentveil-0.7.21-py3-none-any.whl.
File metadata
- Download URL: agentveil-0.7.21-py3-none-any.whl
- Upload date:
- Size: 98.1 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.13
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
141416f060fa34e3213fa5d4b72214107ade79b678832b8a41e495108aeea842
|
|
| MD5 |
74c60c04bf3d35cfa7c201ddf39ab44f
|
|
| BLAKE2b-256 |
83aa64232e0e7a90100a21131ecb4bb2acf5dc76f7ffd767befddff10d68b073
|
Provenance
The following attestation bundles were made for agentveil-0.7.21-py3-none-any.whl:
Publisher:
publish.yml on agentveil-protocol/agentveil-sdk
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
agentveil-0.7.21-py3-none-any.whl -
Subject digest:
141416f060fa34e3213fa5d4b72214107ade79b678832b8a41e495108aeea842 - Sigstore transparency entry: 2188793808
- Sigstore integration time:
-
Permalink:
agentveil-protocol/agentveil-sdk@878ec6a0f002c8e5b724f0dba1cfa165b6cec835 -
Branch / Tag:
refs/tags/v0.7.30-mcp-proxy - Owner: https://github.com/agentveil-protocol
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish.yml@878ec6a0f002c8e5b724f0dba1cfa165b6cec835 -
Trigger Event:
push
-
Statement type: