io.github.Odingard由 GitHub 账号 Odingard 发布v0.3.2更新于 Nov 5, 2026
Routes agent tool calls through Guardian for ALLOW/ASK/DENY before execution.
将智能体的工具调用先交由 Guardian 判定 ALLOW/ASK/DENY 再执行，支持人工审批与可验证回执。
Desktop only，通过 STDIO。 STDIO 服务会启动本地进程，因此需要 SourceWeft 桌面宿主。
参照 仓库 中的启动说明。
[Guardian — human authority for AI]
[npm version] [MCP registry] [Guardian MCP server on mcprush] [License]
Human Authority Infrastructure for Autonomous AI. The agent proposes; the
human decides. Every tool call an agent makes gets a deterministic
ALLOW / ASK / DENY decision before it runs, and every execution produces a
tamper-evident receipt you can verify without an account.
Hosted Guardian: guardian.odingard.com — free tier, no card required. Pricing: Free, Developer $99/month with 25,000 billable executions included, Business via sales.
Full guides: packages/sdk · packages/python · packages/mcp.
Runnable demos in examples/ — each prints SIMULATED (local
demo policy) or LIVE (real hosted Guardian or real published keys).
packages/sdk/src/contracts, packages/sdk/src/evidence, the SDK client,
guard, lifecycle and receipts sources, and the Steel adapter sources are generated from the Guardian monorepo
— don't edit them here. See CONTRIBUTING.md.
Apache-2.0
来源：README.md，提交 d1c2608
Propose a tool invocation to Guardian. ALLOW executes immediately and returns the execution receipt; ASK is held for human approval (call guardian_claim with the returned requestId after the human approves); DENY refuses the action with a reason code.
purposetoolName必填argumentsconnectionIdCollect the capability for a request that was held as ASK and approved by the human, then execute it and return the receipt.
requestId必填Fetch the machine-readable evidence receipts for a request id.
requestId必填已满足适用检查项的 90%
该评分衡量此收录条目的完整程度，依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价，也不表示服务器安全或当前可用：可连通性是带日期的检查结果，评分也不包含安装量或用户评价。
请在注册中心条目中声明凭据请求头，或保持端点能够响应探测，以便判定其认证方式。
npm install @odingard/guardian-sdkimport { classifyRequestResult, createGuardianClient } from "@odingard/guardian-sdk";
const guardian = createGuardianClient({ baseUrl: "https://guardian-api.odingard.com", credential: process.env.GUARDIAN_AGENT_CREDENTIAL!, // gak_… issued per agent});
const d = classifyRequestResult( await guardian.request({ action: "tool.invoke", connectionId: "con_…", toolName: "refund_order", arguments: { orderId: "ord_123" }, }),);
if (d.decision === "ALLOW") { await guardian.execute({ requestId: d.requestId, capabilityToken: d.capabilityToken });}// ASK → held for a human (keep d.requestId, then guardian.claim). DENY → never runs.import { createGuard } from "@odingard/guardian-sdk";
const guard = createGuard({ client: guardian, connectionId: "con_…" });const payInvoice = guard("pay_invoice", async (inv) => myPaymentProvider.pay(inv)); // your codeawait payInvoice({ invoiceId: "INV-1002", amountCents: 1_240_000, payeeId: "acme" });// ALLOW → your code runs + receipt. ASK → GuardianApprovalPending (resume() after approval). DENY → never runs.from odingard_guardian import Guard, GuardianClient
guard = Guard(GuardianClient(credential=...), connection_id="con_…")
@guard("pay_invoice")def pay_invoice(invoice_id: str, amount_cents: int, payee_id: str): ... # your codeguardian-mcp proxy -- npx -y your-whatsapp-mcp-servernpm install && npm run buildcd examplesnode verify-receipt.mjs # LIVE, no account: verify a real receipt offline, then tampernode demo-classes.mjs # the 7 demo classesnode steel-checkout.mjs # Steel checkout → ASK → resumenode shopping-agent.mjs # purchase → ASK, human approves, receiptnode prompt-injection-deny.mjs # injected "export contacts" → DENYnode coding-agent-ask.mjs # consequential command → ASKnode invoice-agent.mjs # B2B invoices: ALLOW under $5k, ASK above, DENY unknown payee (createGuard)python python/invoice_agent.py # the same, in Python (pip install odingard-guardian)packages/sdk @odingard/guardian-sdk core clientpackages/mcp @odingard/guardian-mcp MCP serverpackages/langchain @odingard/guardian-langchainpackages/vercel-ai @odingard/guardian-vercel-aipackages/steel @odingard/guardian-steelpackages/python odingard-guardian (PyPI) Python SDKexamples/ runnable demos