Integrate Kevros

Thirty seconds from curl to signed release token.

The SDK wraps any LLM provider. The first signed release token takes a single HTTP call.

Quickstart

Install

pip install kevros-sdk
# or
npm install @kevros/sdk

SDK packages are available via early access. Contact developers@taskhawktech.com.

Request a release token

curl -X POST https://governance.taskhawktech.com/governance/verify \
  -H "Authorization: Bearer $KEVROS_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "agent_id": "agent-prod-001",
    "action":   "fs.write",
    "target":   "/var/reports/q1-summary.pdf",
    "policy":   "default"
  }'

Response

{
  "decision_id":   "clamp-2026-04-08T14:22:07Z-7f3a",
  "verdict":       "ALLOW",
  "release_token": "mldsa87:...",
  "signer":        "kevros/cosign@v1.4.2",
  "signature":     "mldsa87:3c1d...b9e",
  "prev_hash":     "sha256:a04f...77d"
}

Reference

API reference	Available at `GET /api` on the gateway
Agent SDK (Python)	Early access. Contact developers@taskhawktech.com
Agent SDK (Node)	Early access. Contact developers@taskhawktech.com
Protocol spec	Included in SDK and evidence pack
Golden vectors	Reference chains included in SDK
Verification repo	Public verification repository