⚡ Quickstart

Get Auditail protecting your AI agents in under 5 minutes.

---

Step 1 — Install the SDK

npm

npm install auditail-sdk

yarn

yarn add auditail-sdk

Python (pip)

pip install auditail

---

Step 2 — Get an API Key

👉 Request your API key here

We issue keys to private-beta design partners personally, usually within a day. Then open your dashboard at app.auditail.io and paste the key to see events arrive.

---

Step 3 — Initialize the Client

TypeScript

import { Auditail } from 'auditail-sdk';

const aegis = new Auditail({
  apiKey: process.env.AUDITAIL_API_KEY!,
  environment: 'production', // shows in the dashboard
});

Python

import os
from auditail import Auditail

aegis = Auditail(
    api_key=os.environ["AUDITAIL_API_KEY"],
    environment="production",
)

---

Step 4 — Add Guardrail Rules

TypeScript

aegis
  .addRule(Auditail.rules.noExternalEmail({ internalDomains: ['acme.com'] }))
  .addRule(Auditail.rules.noDataDeletion())
  .addRule(Auditail.rules.noExternalApiCalls());

Python

from auditail import rules

aegis.add_rules([
    rules.no_external_email(internal_domains=["acme.com"]),
    rules.no_data_deletion(),
    rules.no_external_api_calls(),
])

---

Step 5 — Wrap Every Agent Action

This is the core pattern. Before your AI agent executes any action, call aegis.guard():

TypeScript

const payload = {
  to: '[email protected]',
  subject: 'Q3 Report',
  body: 'Please find the report attached.',
};

const result = await aegis.guard({
  action: 'send_email',
  payload,
  agentId: 'financial-report-bot',
  userId: req.user.id, // optional, for user-level audit trails
});

if (result.approved) {
  await emailService.send(payload);
} else {
  console.log(`Blocked [${result.matchedRule}]: ${result.reason}`);
  // result.auditId is already logged — reference it in your incident report
}

Python

payload = {
    "to": "[email protected]",
    "subject": "Q3 Report",
    "body": "Please find the report attached.",
}

result = aegis.guard(
    action="send_email",
    payload=payload,
    agent_id="financial-report-bot",
    user_id=request.user_id,  # optional
)

if result.approved:
    email_service.send(**payload)
else:
    print(f"Blocked [{result.matched_rule}]: {result.reason}")

---

What You Get

Every guard() call returns:

{
  "approved": false,
  "auditId": "aeg_1a2b3c_x9z4k7",
  "reason": "Blocked: sending email to an external domain is not permitted.",
  "matchedRule": "no-external-email",
  "timestamp": "2025-01-15T10:30:00.000Z",
  "latencyMs": 2
}

And every event is logged to the Auditail dashboard with:

• Full payload
• The agent ID and user ID
• Which rule fired and why
• Environment label

---

Next Steps

• Guardrails → — Write custom rules for your specific use case
• Audit Trail → — Understand what gets logged and how to query it
• LangChain Integration → — Drop-in wrapper for LangChain tools
• Human Approval → — Pause on risky actions and require a human sign-off

tip

Guardrail rules run locally inside your process, so a decision never waits on the network. Events are sent to Auditail in the background. Call await aegis.flush() before a serverless function returns.