Zubbl FastAPI

The official FastAPI integration for the Zubbl Runtime Intelligence Platform.

Zubbl provides real-time runtime visibility, behavioural security and adaptive protection from inside your application.

Features

• 5 minute integration
• Automatic endpoint discovery
• Runtime request telemetry
• Behavioural security signals
• Runtime protection policies
• Live Runtime Viewer integration
• Runtime Guard heartbeat
• Zero application code changes beyond initial setup

Requirements

• Python 3.10+
• FastAPI 0.110+

Installation

pip install zubbl-fastapi

Quick Start

import os

from fastapi import FastAPI
from zubbl_fastapi import Zubbl

app = FastAPI()

zubbl = Zubbl(
    os.environ["ZUBBL_API_KEY"],
    identify=lambda request: request.state.user.id,
)

zubbl.attach(app)

Start your application.

Your application will automatically appear inside the Zubbl Runtime Viewer.

API keys

Supply ZUBBL_API_KEY through an uncommitted local environment file or your hosting platform managed environment-variable or secret facility. Never paste a real key into application source.

Trusted network context

Runtime Guard resolves the client IP from FastAPI and obtains trusted country, ASN, VPN and hosting information through a signed, cached Zubbl lookup before applying network policies.

trust_proxy_headers=True is not required for a normal installation. It remains an advanced option for deployments where the framework server has not already resolved the originating client IP and the proxy trust boundary is explicitly controlled.

Bootstrap availability

Recoverable bootstrap outages fail open by default: the FastAPI application starts, requests continue, and Runtime Guard retries after 30 seconds. During the outage, request.state.zubbl_skipped_reason is bootstrap_unavailable. Invalid or revoked keys and invalid configuration remain fatal.

Strict applications can set bootstrap_failure="closed". The retry interval can be changed with bootstrap_retry_seconds. This local bootstrap policy is separate from the remotely supplied runtime_fail_mode.

Documentation

https://zubbl.com

Runtime Intelligence

Unlike traditional security tooling, Zubbl observes what happens after authentication.

It continuously builds runtime evidence, behavioural intelligence and protection decisions directly from application behaviour.

Built by Zubbl.