Define policies. Evaluate every tool call. Maintain a tamper-evident audit chain. Inner I Secure brings enterprise-grade governance to AI agents without the complexity.
"We deployed an AI agent to handle customer refunds. It approved $40K in fraudulent requests before we caught it. There was no policy enforcement layer — just the agent and its judgment."— Enterprise ops lead, anonymized
Four integrated modules that work together to give you complete visibility and control.
Instantly evaluate any tool call against your active policies. Pass in the agent ID, tool name, parameters, and get an instant allow/deny verdict with reasoning.
POST /api/secure/evaluate
Define named JSON policies with allow/deny rules, conditions, and descriptions. Version them, activate/deactivate them, and see which tools they govern — all in a single UI.
CRUD at /api/secure/policy
Every policy evaluation is recorded in an append-only HMAC-SHA256 hash chain. Verify the chain's integrity at any time. No tampering goes undetected — ever.
GET /api/secure/chain/verify
Drop into your agent with one import. Full type definitions, async/await API, and a 5-minute integration guide. Works with any agent framework.
npm install @innerinet/secure
Write a JSON policy in the editor. Use allow/deny rules, conditions on tool names, parameter constraints, and agent IDs. Activate it in one click.
allow: ["send_email", "read_file"]
Add @innerinet/secure to your agent. Call secure.evaluate() before every tool invocation. That's it — the rest is handled automatically.
const result = await secure.evaluate(call)
Every call is logged to the hash chain. Inspect the chain, verify its integrity, and export the full audit trail whenever you need it — compliance, incidents, or debugging.
GET /api/secure/chain
The TypeScript SDK handles everything — policy fetching, evaluation, and chain recording — so you can focus on your agent, not the governance layer.
// Import the SDK import { SecureClient } from '@innerinet/secure'; // Initialize with your API key const secure = new SecureClient({ apiKey: process.env.INNER_I_SECURE_KEY, endpoint: 'https://shapeos-3.polsia.app/api/secure', }); // Before every tool call, evaluate the policy async function runToolCall(agentId, tool, params) { const result = await secure.evaluate({ agentId, tool, parameters: params, }); if (!result.allowed) { // Policy denied — log and halt console.error(`Policy blocked: ${result.reason}`); return { error: 'blocked_by_policy', reason: result.reason }; } // Proceed — the call is recorded in the audit chain return await executeTool(tool, params); } // Verify chain integrity at any time const verification = await secure.verifyChain(); console.log(verification.valid ? 'Chain intact' : 'CHAIN TAMPERED');
No locked-in commitments. Upgrade when you need more evals, persistence, and enterprise features.
The live demo is already running. No setup, no sign-up required.
Launch the live demo →