Welcome
Checkpoint protects your applications from AI agents and automated bots
Checkpoint is a comprehensive AI agent detection and protection platform. It identifies and manages automated traffic on your web applications with enterprise-grade detection, flexible enforcement, and identity-based governance for AI agents.
Why Checkpoint?
- Advanced AI Detection — State-of-the-art algorithms to identify AI agents, bots, and automated browsers
- Flexible Enforcement — Block, redirect, rate-limit, or allow — you decide how to handle detected agents
- Identity Governance — Control what AI agents can access using MCP-I (Model Context Protocol with Identity)
- Real-time Analytics — Monitor traffic patterns, detection trends, and agent activity
- Privacy First — GDPR compliant with configurable privacy settings
Platform Overview
Detect
Identify AI agents and bots using client-side or server-side signals. Checkpoint supports multiple detection methods you can use independently or combine.
- Marketing Pixel — No-code, drop-in script tag
- JavaScript Beacon — Full-featured SDK with WebWorker support
- Middleware — Server-side detection in Next.js or Express
- Gateway — DNS-based detection at the edge
Learn more about detection methods →
Enforce
Take action on detected agents with configurable policies. Start with logging, then graduate to blocking or rate-limiting when you're confident in your detection settings.
- Gateway Enforcement — Edge-level enforcement via DNS
- Middleware Enforcement — Code-level enforcement in your app
- Policy Configuration — Fine-tune rules and thresholds
Learn more about enforcement →
Govern (MCP-I)
Control what AI agents can access using identity-based governance. MCP-I (Model Context Protocol with Identity) adds authentication, authorization, and consent to AI agent interactions.
- Delegation — Scoped, time-limited access grants
- Tool-Level Permissions — Per-tool scope requirements
- OAuth Integration — Standard OAuth 2.0 flows for agent auth
- Consent Management — User-facing consent pages
Choose Your Integration
Marketing Pixel
GTM-compatible pixel for marketing teams - no coding required
Beacon
Lightweight tracking beacon for any website with WebWorker support
Marketing Pixel
GTM-compatible pixel for marketing teams - no coding required
Beacon
Lightweight tracking beacon for any website with WebWorker support
Quick Start
Get started with Checkpoint in minutes:
# For Next.js applications
npm install @kya-os/agentshield-nextjs
# For Express applications
npm install @kya-os/agentshield-express
# For client-side detection
npm install @kya-os/agentshield-beaconThen follow our Quick Start Guide to configure your first protection.
Architecture Overview
Checkpoint uses a multi-layered approach to detect and manage automated traffic:
- Detection Layer — Analyzes requests using user agent, TLS fingerprint, headers, and behavioral signals
- Classification Engine — Classifies traffic as
human,ai_agent,bot, orincomplete_datawith confidence scores (0–100) - Policy Engine — Evaluates enforcement rules (allow lists, deny lists, path rules, thresholds)
- Governance Layer — MCP-I identity verification, delegation proofs, and scoped access control
- Analytics Layer — Tracks and reports detection metrics with session consolidation
Next Steps
- Getting Started — Core concepts and installation overview
- Quick Start — Get up and running in 5 minutes
- Dashboard — Navigate the Checkpoint dashboard
- API Reference — Complete REST API documentation
Support
- Email: [email protected]
- Issues: GitHub Issues
