Guardian · Developers
Developers
Register an agent, give it a Guardian credential instead of a master key, and let Guardian decide and execute each action.
Available in the pilot
How an agent works with Guardian today
Your agent never holds a mailbox token. It holds a Guardian credential that can request actions and cannot approve them.
- 01Register the agent
In the Guardian app, create an agent and copy its one-time credential. The agent never sees your Gmail token.
- 02Grant authority
Choose Allow, Ask or Off for each connected mailbox. Each change is a new policy version.
- 03Request a capability
The agent sends the exact action it wants to Guardian’s agent API.
- 04Claim, if you were asked
When the verdict is ASK, the agent waits until you decide in the app, then claims the approved capability.
- 05Execute and verify
Guardian performs the send with the sealed credential, verifies it, and returns a receipt.
Agent API
Three calls: request, claim, execute
| Route | Purpose |
|---|---|
| POST /v1/agent/requests | Request a capability for one canonical action. Returns ALLOW, ASK or DENY. |
| POST /v1/agent/claims | Claim a capability a person approved. |
| POST /v1/agent/execute | Execute the capability once. A repeat is suppressed. |
MCP · in development The same three steps are available to MCP clients as Guardian tools: guardian_request_capability, guardian_claim_approved_capability and guardian_execute_capability.
Planned SDK A thin client library around the same contract:
guardian.authorize(action) guardian.execute(capability) guardian.verify(receipt)
Developer access is by invitation during the pilot. API reference and credentials are provided when you are onboarded.
Get started
Let AI act for you without letting it become you.
Individuals
Use Guardian with your own agents
Guardian Personal is in pilot. Gmail connection is open to invited pilot users while Google completes verification.
Developers
Put your agent behind Guardian
Register an agent, swap its mailbox token for a Guardian credential, and call the agent API.
Organizations
Embed Guardian or become a design partner
For assistants, banks, commerce providers and platforms that want their users’ agents to act under real authority.
Odingard Security · Trust infrastructure for autonomous systems