strands-deepkeep

Strands Agents hook provider for the DeepKeep AI Firewall.

DeepKeep runs before a Strands invocation reaches the model and after the model returns. It can block unsafe content, pass safe content through, and apply redacted or modified text returned by DeepKeep.

Installation

pip install strands-deepkeep

Quick start

import os

from strands import Agent
from strands_deepkeep import DeepKeepGuardrail

agent = Agent(
    plugins=[
        DeepKeepGuardrail(
            api_key=os.environ["DEEPKEEP_API_KEY"],
            base_url=os.environ["DEEPKEEP_BASE_URL"],
            pre_model="input-firewall-id",
            post_model="output-firewall-id",
        )
    ]
)

result = agent("Summarize this customer support request")

pre_model and post_model are DeepKeep firewall IDs. Each value is sent to the matching moderation endpoint as the model field.

Behavior

• allow and alert decisions let the invocation continue.
• block decisions cancel the invocation before the model or clear blocked model output after the model call.
• redact and modify decisions replace the latest user text before the invocation or replace generated assistant text after the model call.
• DeepKeep API decisions are stored in invocation_state as deepkeep_pre and deepkeep_post for audit and logging.

Environment

You can pass credentials directly or set:

export DEEPKEEP_API_KEY="dk-..."
export DEEPKEEP_BASE_URL="https://your-deepkeep-instance.example"

Strands catalog entry

Submit the integration to Strands by adding site/src/content/catalog/strands-deepkeep.yaml to strands-agents/harness-sdk:

name: strands-deepkeep
description: DeepKeep AI Firewall guardrails for Strands Agents using lifecycle hooks around model input and output.
integrationType: plugin
languages:
  python:
    package: strands-deepkeep
github: https://github.com/Deepkeepai/strands-deepkeep
docsUrl: https://github.com/Deepkeepai/strands-deepkeep#readme
addedDate: 2026-08-26
maintainedBy: partner