Metadata-Version: 2.4
Name: agentwall-security
Version: 0.1.0
Summary: AI Agent Runtime Security Platform — runtime security and behavioral monitoring for agentic AI systems
Project-URL: Homepage, https://github.com/RwitabrataPan/AgentWall
Project-URL: Repository, https://github.com/RwitabrataPan/AgentWall
Project-URL: Issues, https://github.com/RwitabrataPan/AgentWall/issues
Project-URL: Changelog, https://github.com/RwitabrataPan/AgentWall/blob/main/CHANGELOG.md
Author: Rwitabrata Pan
License: MIT License
        
        Copyright (c) 2026 AgentWall
        
        Permission is hereby granted, free of charge, to any person obtaining a copy
        of this software and associated documentation files (the "Software"), to deal
        in the Software without restriction, including without limitation the rights
        to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
        copies of the Software, and to permit persons to whom the Software is
        furnished to do so, subject to the following conditions:
        
        The above copyright notice and this permission notice shall be included in all
        copies or substantial portions of the Software.
        
        THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
        IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
        FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
        AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
        LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
        OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
        SOFTWARE.
License-File: LICENSE
Keywords: agents,ai,guardrails,llm,monitoring,runtime,security
Classifier: Development Status :: 3 - Alpha
Classifier: Intended Audience :: Developers
Classifier: License :: OSI Approved :: MIT License
Classifier: Programming Language :: Python :: 3
Classifier: Programming Language :: Python :: 3.12
Classifier: Programming Language :: Python :: 3.13
Classifier: Topic :: Scientific/Engineering :: Artificial Intelligence
Classifier: Topic :: Security
Classifier: Topic :: Software Development :: Libraries :: Python Modules
Requires-Python: >=3.12
Requires-Dist: anthropic>=0.25
Requires-Dist: fastapi>=0.110
Requires-Dist: httpx>=0.27
Requires-Dist: keyring>=24.0
Requires-Dist: openai>=1.30
Requires-Dist: pydantic>=2.0
Requires-Dist: pywebview>=5.0
Requires-Dist: sqlalchemy>=2.0
Requires-Dist: typer>=0.12
Requires-Dist: uvicorn[standard]>=0.27
Provides-Extra: crewai
Requires-Dist: crewai>=0.80; extra == 'crewai'
Provides-Extra: dev
Requires-Dist: httpx>=0.27; extra == 'dev'
Requires-Dist: pytest-asyncio>=0.23; extra == 'dev'
Requires-Dist: pytest>=8.0; extra == 'dev'
Provides-Extra: integrations
Requires-Dist: crewai>=0.80; extra == 'integrations'
Requires-Dist: langchain-openai>=0.2; extra == 'integrations'
Requires-Dist: langchain>=0.3; extra == 'integrations'
Requires-Dist: openai-agents>=0.17; extra == 'integrations'
Provides-Extra: langchain
Requires-Dist: langchain-openai>=0.2; extra == 'langchain'
Requires-Dist: langchain>=0.3; extra == 'langchain'
Provides-Extra: openai-agents
Requires-Dist: openai-agents>=0.17; extra == 'openai-agents'
Description-Content-Type: text/markdown

# AgentWall

**Behavior-based runtime security for AI agents.**

AgentWall is an SDK-first runtime security platform that sits between AI agents and tools, monitoring actions in real time to detect and prevent unsafe behavior.

Unlike prompt scanners and jailbreak detectors, AgentWall focuses on **what agents actually do**, not what users say.

---

## Why AgentWall?

Modern AI agents can:

* Read files
* Execute tools
* Access APIs
* Send emails
* Interact with external systems

A successful prompt injection often matters only because it changes agent behavior.

AgentWall detects:

* Goal Hijacking
* Tool Misuse
* Scope Expansion
* Sensitive Resource Access
* Data Exfiltration
* Unauthorized Actions
* Behavioral Drift

---

## How It Works

```text
User Goal
    ↓
AI Agent
    ↓
AgentWall Runtime
    ↓
Tool Execution
```

Before a tool executes, AgentWall evaluates:

* Current goal
* Tool being used
* Resource being accessed
* Recent tool history
* Active policies
* Risk score

AgentWall may:

* ALLOW
* WARN
* BLOCK

depending on risk and alignment.

---

## Key Features

### Runtime Security

Behavior-based protection for AI agents.

### Goal Tracking

Automatically infers and tracks goals throughout a session.

### Policy Engine

Create custom allow/warn/block rules.

### Post-Execution Analysis

Classifies tool outcomes and records security-relevant findings without storing sensitive outputs.

### Inspector

Native desktop security console powered by PyWebView.

Launch with:

```bash
agentwall inspect
```

### Provider Agnostic

Supports:

* OpenAI
* Anthropic
* Groq
* DeepSeek
* Ollama

### Framework Integrations

Supports:

* OpenAI Agents SDK
* LangChain
* CrewAI

---

## Installation

```bash
pip install agentwall
```

---

## Quick Start

### OpenAI Agents SDK

```python
from agentwall import protect_agent

agent = protect_agent(agent)

result = await Runner.run(
    agent,
    "Build a FastAPI CRUD API"
)
```

### LangChain

```python
from agentwall.integrations import protect_langchain_agent

executor = protect_langchain_agent(executor)
```

### CrewAI

```python
from agentwall.integrations import protect_crewai_crew

crew = protect_crewai_crew(crew)
```

---

## Inspector

Launch the desktop Inspector:

```bash
agentwall inspect
```

Features:

* Session Timeline
* Security Decisions
* Risk Scores
* Goal Segments
* Detector Results
* Policy Management
* Provider Configuration
* Export (JSON/CSV)

---

## CLI

```bash
agentwall version
agentwall doctor
agentwall config
agentwall inspect
```

---

## Security Model

AgentWall focuses on:

* Runtime behavior
* Tool usage
* Resource access
* Goal alignment

AgentWall does **not** primarily operate as:

* Prompt firewall
* Jailbreak detector
* Content moderation system

Instead it evaluates the consequences of agent actions.

---

## Supported Storage

Local-only architecture.

Uses:

* SQLite
* OS Keyring
* Local FastAPI backend
* Local Inspector UI

No cloud dependency required.

---

## Architecture

```text
Goal Tracking
        ↓
Security Engine
        ↓
Policy Evaluation
        ↓
Risk Assessment
        ↓
Optional LLM Evaluation
        ↓
Decision
        ↓
Tool Execution
        ↓
Post-Execution Analysis
```

---

## Documentation

* Installation Guide
* Architecture Guide
* API Reference
* Security Guide
* Testing Guide

See the repository documentation for details.

---

## License

MIT License.

---

## Status

**v0.1.0**

Production-ready initial release.

Open-source and self-hosted.
