This release has been yanked by its maintainers, and will be ignored by installers, except when explicitly specified.
coinbase-agentkit-kevros
Kevros governance ActionProvider for Coinbase AgentKit. Verify autonomous agent actions against policy bounds, generate hash-chained provenance attestations, bind intent to command, and validate peer trust before execution.
Installation
pip install coinbase-agentkit-kevros
Requires coinbase-agentkit as a peer dependency.
Quick Start
from coinbase_agentkit import AgentKit
from coinbase_agentkit_kevros import KevrosActionProvider
# Initialize with your Kevros API key
kevros_provider = KevrosActionProvider(api_key="your-kevros-api-key")
# Register with AgentKit
agent = AgentKit(
action_providers=[kevros_provider]
)
Actions
The provider registers the following AgentKit actions, each mapped to a Kevros governance endpoint:
| Action | Endpoint | Price | Description |
|---|---|---|---|
kevros_verify |
/governance/verify |
$0.01 | Verify an action against policy bounds. Returns ALLOW, CLAMP, or DENY. |
kevros_attest |
/governance/attest |
$0.02 | Generate a hash-chained provenance attestation for a verified action. |
kevros_bind |
/governance/bind |
$0.02 | Cryptographic proof binding agent intent to the executed command. |
kevros_scan |
/shield/scan |
$0.01 | Threat detection and input validation before execution. |
kevros_bundle |
/governance/bundle |
$0.05 | Export a compliance evidence bundle for audit. |
kevros_media_attest |
/media/attest |
$0.05 | PQC-signed attestation certificate for media content. |
kevros_batch |
/governance/batch |
$0.01 | Batch multiple governance calls into one request. |
Usage with LangChain
from langchain_openai import ChatOpenAI
from coinbase_agentkit import AgentKit
from coinbase_agentkit_kevros import KevrosActionProvider
from coinbase_agentkit_langchain import CoinbaseAgentKitToolkit
kevros_provider = KevrosActionProvider(api_key="your-kevros-api-key")
agent_kit = AgentKit(action_providers=[kevros_provider])
toolkit = CoinbaseAgentKitToolkit(agent_kit=agent_kit)
tools = toolkit.get_tools()
Governance Flow
Every AgentKit action passes through Kevros before execution:
Agent decides action
|
v
kevros_verify(action, parameters)
|
+-- ALLOW --> execute action --> kevros_attest(result)
|
+-- CLAMP --> execute with clamped parameters --> kevros_attest(result)
|
+-- DENY --> action blocked, reason logged
Fail-closed by default. If the Kevros gateway is unreachable, the provider returns DENY. No silent pass-through.
Configuration
kevros_provider = KevrosActionProvider(
api_key="your-kevros-api-key",
base_url="https://governance.taskhawktech.com", # default
fail_closed=True, # default; DENY on any error
auto_attest=True # default; attest every ALLOW automatically
)
Environment Variables
KEVROS_API_KEY=your-kevros-api-key
KEVROS_BASE_URL=https://governance.taskhawktech.com
Payment Protocols
Three payment rails. Use whichever fits your agent's wallet.
| Protocol | Rail | Settlement |
|---|---|---|
| x402 | USDC on Base | Per-call. Coinbase Commerce + Cloudflare. |
| L402 | Lightning Network | Per-call. Instant sats. |
| MPP / Stripe Tempo | Fiat (USD) | Subscription or credit packs. |
Pricing
| Tier | Monthly | Included Calls |
|---|---|---|
| Free | $0 | 1,000 |
| Scout | $29 | 5,000 |
| Sentinel | $149 | 50,000 |
| Sovereign | $499 | 500,000 |
1,000 calls/month free. No credit card required.
Links
| Resource | URL |
|---|---|
| Kevros Gateway | https://governance.taskhawktech.com |
| Coinbase AgentKit | https://github.com/coinbase/agentkit |
| API Docs | https://governance.taskhawktech.com/docs |
| Status | https://governance.taskhawktech.com/status |
License
Proprietary. Copyright 2026 TaskHawk Systems, LLC.
CAGE Code 10YV4. SAM.gov registered. NIST 800-171 / DFARS 252.204-7012 aligned.
Contact
+JM
1 maintainer
Metadata
1 maintainer
Release files for coinbase-agentkit-kevros 0.1.9
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| coinbase_agentkit_kevros-0.1.9.tar.gz | 12.7 kB | With provenance | Details for coinbase_agentkit_kevros-0.1.9.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| coinbase_agentkit_kevros-0.1.9-py3-none-any.whl | Python 3 | none | any | Details for coinbase_agentkit_kevros-0.1.9-py3-none-any.whl |
Total release size: 20.5 kB
Release files / coinbase_agentkit_kevros-0.1.9.tar.gz
| Download URL | coinbase_agentkit_kevros-0.1.9.tar.gz |
|---|---|
| Size | 12.7 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
fd0a5159f332ed0c8ac5c0f57636c5185f66fcc3ae48df5605409491286c8aeb
|
|
BLAKE2b-256 checksum How to use checksums |
45b05620c6a4ab1b81d1d9a12035a6c8daa9abb2daea19529a4968ba20c777f5
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.13.7
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Mar 23, 2026.
Transparency logRelease files / coinbase_agentkit_kevros-0.1.9-py3-none-any.whl
| Download URL | coinbase_agentkit_kevros-0.1.9-py3-none-any.whl |
|---|---|
| Size | 7.8 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
bd0ebb47da3cc38ae9e5efdcc858756f37ba328468d7abe2fb6bc937b1afa72a
|
|
BLAKE2b-256 checksum How to use checksums |
50502f11ea44eea3f77cfb617fbdb379fa3737b9661ac8d96e1e91c87c3d32c6
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.13.7
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Mar 23, 2026.
Transparency logSecurity for coinbase-agentkit-kevros 0.1.9
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
All 2 files in this release have been uploaded with provenance metadata.
Attestation for coinbase_agentkit_kevros-0.1.9.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Mar 23, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.
