coinbase-agentkit-kevros 0.1.9

Kevros governance ActionProvider for Coinbase AgentKit. Verify autonomous agent actions against policy bounds, generate hash-chained provenance attestations, bind intent to command, and validate peer trust before execution.

coinbase-agentkit-kevros

Kevros governance ActionProvider for Coinbase AgentKit. Verify autonomous agent actions against policy bounds, generate hash-chained provenance attestations, bind intent to command, and validate peer trust before execution.

Installation

pip install coinbase-agentkit-kevros

Requires coinbase-agentkit as a peer dependency.

Quick Start

from coinbase_agentkit import AgentKit
from coinbase_agentkit_kevros import KevrosActionProvider

# Initialize with your Kevros API key
kevros_provider = KevrosActionProvider(api_key="your-kevros-api-key")

# Register with AgentKit
agent = AgentKit(
    action_providers=[kevros_provider]
)

Actions

The provider registers the following AgentKit actions, each mapped to a Kevros governance endpoint:

Action	Endpoint	Price	Description
kevros_verify	/governance/verify	$0.01	Verify an action against policy bounds. Returns ALLOW, CLAMP, or DENY.
kevros_attest	/governance/attest	$0.02	Generate a hash-chained provenance attestation for a verified action.
kevros_bind	/governance/bind	$0.02	Cryptographic proof binding agent intent to the executed command.
kevros_scan	/shield/scan	$0.01	Threat detection and input validation before execution.
kevros_bundle	/governance/bundle	$0.05	Export a compliance evidence bundle for audit.
kevros_media_attest	/media/attest	$0.05	PQC-signed attestation certificate for media content.
kevros_batch	/governance/batch	$0.01	Batch multiple governance calls into one request.

Usage with LangChain

from langchain_openai import ChatOpenAI
from coinbase_agentkit import AgentKit
from coinbase_agentkit_kevros import KevrosActionProvider
from coinbase_agentkit_langchain import CoinbaseAgentKitToolkit

kevros_provider = KevrosActionProvider(api_key="your-kevros-api-key")
agent_kit = AgentKit(action_providers=[kevros_provider])
toolkit = CoinbaseAgentKitToolkit(agent_kit=agent_kit)

tools = toolkit.get_tools()

Governance Flow

Every AgentKit action passes through Kevros before execution:

Agent decides action
    |
    v
kevros_verify(action, parameters)
    |
    +-- ALLOW --> execute action --> kevros_attest(result)
    |
    +-- CLAMP --> execute with clamped parameters --> kevros_attest(result)
    |
    +-- DENY --> action blocked, reason logged

Fail-closed by default. If the Kevros gateway is unreachable, the provider returns DENY. No silent pass-through.

Configuration

kevros_provider = KevrosActionProvider(
    api_key="your-kevros-api-key",
    base_url="https://governance.taskhawktech.com",  # default
    fail_closed=True,    # default; DENY on any error
    auto_attest=True     # default; attest every ALLOW automatically
)

Environment Variables

KEVROS_API_KEY=your-kevros-api-key
KEVROS_BASE_URL=https://governance.taskhawktech.com

Payment Protocols

Three payment rails. Use whichever fits your agent's wallet.

Protocol	Rail	Settlement
x402	USDC on Base	Per-call. Coinbase Commerce + Cloudflare.
L402	Lightning Network	Per-call. Instant sats.
MPP / Stripe Tempo	Fiat (USD)	Subscription or credit packs.

Pricing

Tier	Monthly	Included Calls
Free	$0	1,000
Scout	$29	5,000
Sentinel	$149	50,000
Sovereign	$499	500,000

1,000 calls/month free. No credit card required.

Links

Resource	URL
Kevros Gateway	https://governance.taskhawktech.com
Coinbase AgentKit	https://github.com/coinbase/agentkit
API Docs	https://governance.taskhawktech.com/docs
Status	https://governance.taskhawktech.com/status

License

Proprietary. Copyright 2026 TaskHawk Systems, LLC.

CAGE Code 10YV4. SAM.gov registered. NIST 800-171 / DFARS 252.204-7012 aligned.

Contact

[e-mail]

+JM