Developer Docs
Everything you need to build controlled, auditable AI agents.
Integrate in minutes, not days.
Quick Start
60-Second Quickstart
Install APort for Claude Code, Cursor, GitHub, MCP, or framework hooks from one command-first page.
GitHub Repository Guard
Protect pull requests and protected pushes with GitHub OIDC, repository-scoped passports, and signed decisions.
MCP Tool Authorization
Authorize MCP servers and tools through the mcp.tool.execute.v1 policy pack and supported framework hooks.
API Reference
Interactive API explorer with verify endpoints, passport APIs, policy packs, and response shapes.
Enterprise Device Deployment
Generic deploy, enforce, and uninstall scripts for IT-managed developer machines.
Integration Examples
Copy the path that matches your runtime. APort checks the action before execution and records the decision.
Claude Code Guardrails
Create or select a hosted passport and install the Claude Code hook.
npx @aporthq/aport-agent-guardrails claude-code
# or:
curl -fsSL https://aport.io/install.sh | bash -s -- claude-codeCursor Guardrails
Install Cursor hook wiring with hosted or local passport mode.
npx @aporthq/aport-agent-guardrails cursor
# The installer writes Cursor hook config and APort mode settings.GitHub Repository Guard
Use GitHub OIDC and the public APort action; no broad APort API key in workflow secrets.
permissions:
contents: read
pull-requests: read
id-token: write
steps:
- uses: actions/checkout@v4
- uses: aporthq/policy-verify-action@v1
with:
mode: autoMCP Tool Policy
Call the hosted verifier before an MCP tool executes.
const decision = await aport.verify("mcp.tool.execute.v1", {
agent_id: "ap_xxx",
mcp_server: "https://mcp.stripe.example",
mcp_tool: "stripe.refunds.create"
});
if (!decision.allow) {
throw new Error(decision.reasons[0].message);
}Core Features
Agent Verification
Cryptographically signed passports with real-time status verification and policy evaluation.
MCP Support
Model Context Protocol server and tool allowlists through policy packs and supported runtime hooks.
Policy Enforcement
Deterministic policy enforcement with policy packs for finance, data, messaging, and code.
Three Authentication Methods
Choose the right auth method for your use case
No Auth
Public verification endpoints
/api/verify/*API Keys
Server-to-server access
Bearer apk_...JWT Tokens
User sessions & interactive
Bearer eyJ0...Need Help Getting Started?
Our team is here to help you integrate APort into your application.
