Agent Firewall

Runtime authorization for autonomous AI actions. Competitors govern the session. RaksHex governs the action.

These docs are public. You do not need an account to read them. The first step is the Node client createAgentFirewallClient from this repo's packages/sdk — not the CLI scanner, and not the VS Code extension.

Hello world

This week's hello-world is the Node client in this repo at packages/sdk. Build that package, then add it by workspace path. The first step is createAgentFirewallClient — not the CLI scanner, and not the VS Code extension.

Build packages/sdk from this repository

git clone https://github.com/Akshu1245/Rakshex-complete-codebase.git
cd Rakshex-complete-codebase
pnpm install
pnpm --filter @rakshex/sdk build

Workspace path install (inside this repo)

pnpm add ./packages/sdk

Path install from another project

pnpm add /path/to/Rakshex-complete-codebase/packages/sdk

Create the Agent Firewall client

import { createAgentFirewallClient } from "@rakshex/sdk";

const firewall = createAgentFirewallClient({
  apiKey: process.env.RAKSHEX_API_KEY!, // rk_... workspace key
  workspaceId: 1,
  agentId: "agent_123",
  capabilityToken: process.env.RAKSHEX_CAPABILITY_TOKEN!, // rk_cap_... delegated authority
});

Authorize a semantic action

const { decision, result } = await firewall.authorizeAndRun(
  { provider: "stripe", operation: "financial.refund", amountMinor: 5000, currency: "USD" },
  async () => stripe.refunds.create({/* ... */}),
);

Full Agent Firewall getting started →

Reading vs running

Reading this page does not require a login. Running the client against the live API does: you need a private-beta invite, a workspace API key (rk_...), and a capability token (rk_cap_...). Request access on the waitlist if you do not have keys yet.

Request private-beta access →