Developers

Build with AtlaSent.

Open tools, SDKs, an API and an MCP server for protecting consequential actions in your own code, pipelines and agents. Start free, locally, with no account.

Get your API key — free Buy Team Cloud Read the docs Self-service plans

Developer distribution

Pick your starting point.

Open Source / Community

The Claude Code agent guard and MCP Gate block risky actions on your machine, with local rules and a local activity log. No account, free for good.

Community →

SDKs and API

TypeScript and Python SDKs and a REST API. protect() resolves only when a permit is issued and verified; a refusal throws.

SDK docs →

MCP server

Give Claude Code, Cursor or any MCP host AtlaSent tools with npx -y @atlasent/mcp-server. Local mode is a demo; add an API key for real decisions.

MCP server →

GitHub Action and Protection Packs

Gate a deploy with one pipeline step, and start from a packaged protected action in the console instead of writing policy from scratch.

Deploy gate guide →

For engineers

Gate a deploy in five lines.

The deploy runs only after the exact change is approved. A refusal fails the step with the reason.

# .github/workflows/deploy.yml — the deploy job needs
# permissions: { id-token: write } for the workload identity
- id: atlasent
  uses: Atlasent/atlasent-action@v1
  env:
    ATLASENT_API_KEY: ${{ secrets.ATLASENT_API_KEY }}
  with:
    action: production.deploy

- name: Deploy
  if: steps.atlasent.outputs.verified == 'true'  # gate on verified, not decision
  run: ./deploy.sh

Deploy gate guide Using code instead? SDKs

For developers

Or gate the action in code.

Put protect() in front of the consequential effect. Without a verified permit, the effect never runs.

$ npm install @atlasent/sdk

import atlasent, { AtlaSentDeniedError } from "@atlasent/sdk";

try {
  await atlasent.protect({
    agent: "deploy-bot",
    action: "production.deploy",
    context: { environment: "production", commit: sha },
  });
  await deploy(sha);  // runs only with a verified permit
} catch (err) {
  if (err instanceof AtlaSentDeniedError) halt(err.reason);
}

TypeScript SDK Python SDK

Self-service cloud

Community, Developer Cloud and Team Cloud.

Every account keeps a free cloud allowance. Developer Cloud is planned and not yet for sale. Team Cloud is available today for teams that want shared policies, hosted approvals and central management.

See self-service plans

Need organization-wide protection?

Coverage across teams and systems, enterprise identity, separation of duties, evidence and support are AtlaSent Enterprise, which is scoped and priced separately.

AtlaSent Enterprise →