Quickstart

import { Inviolet } from '@inviolet/agent-sdk-core'

const inviolet = new Inviolet({
  gatewayUrl: process.env.INVIOLET_GATEWAY_URL!,
  apiKey: process.env.INVIOLET_API_KEY!,
  agentId: 'support-copilot',
})

// 1) Mint a mandate at the start of a session.
const mandate = await inviolet.mintMandate({
  intentId: 'intents:customer_support_lookup',
  actor: 'alice@example.com',
  requestedScope: {
    operations: ['postgres.select'],
    resources: ['contacts.first_name', 'contacts.last_name'],
  },
  audience: 'postgres-prod',
})

// 2) Guard every tool call against the mandate.
const verdict = await inviolet.guard({
  mandateJwt: mandate.credential,
  surface: 'sdk',
  operation: 'postgres.select',
  arguments: { table: 'contacts', id: 42 },
  audience: 'postgres-prod',
})

if (!verdict.allowed) {
  if (verdict.action === 'request_approval') {
    /* the gateway has queued an approval — poll or render in your UI */
  } else if (verdict.action === 'reroute') {
    /* the intent card defines a Violet-tier handler — fall back */
  } else {
    throw new Error(verdict.reason ?? 'Denied by Inviolet')
  }
}

// 3) Proceed with the actual tool call.
const rows = await db.query(
  'SELECT first_name, last_name FROM contacts WHERE id = $1',
  [42],
)

import os, httpx

GATEWAY = os.environ["INVIOLET_GATEWAY_URL"]
HEADERS = {"authorization": f"Bearer {os.environ['INVIOLET_API_KEY']}"}

# 1) Mint a mandate.
mandate = httpx.post(f"{GATEWAY}/v1/mandate/dispense", headers=HEADERS, json={
    "actor": "alice@example.com",
    "intent_id": "intents:customer_support_lookup",
    "requested_scope": {
        "operations": ["postgres.select"],
        "resources": ["contacts.first_name", "contacts.last_name"],
    },
    "audience": "postgres-prod",
}).json()

# 2) Guard a tool call against the mandate.
verdict = httpx.post(
    f"{GATEWAY}/v1/mcp-proxy/call",
    headers={**HEADERS, "x-inviolet-mandate": mandate["credential"]},
    json={
        "action": {
            "surface": "sdk",
            "operation": "postgres.select",
            "arguments": {"table": "contacts", "id": 42},
        },
        "audience": "postgres-prod",
    },
).json()

if not verdict["kind"].startswith("allow"):
    raise RuntimeError(verdict.get("message", "Denied by Inviolet"))