Integrations
Works with the way you build agents
Everything on this page is available today. Call the API from any language, wrap tools with the SDK adapters, or put the gateway in front of MCP and HTTP calls.
SDKs and adapters
Guard the action where it runs
Node.js
@vulnify/sdk
check, guard (runs your function only on ALLOW), wait for human review, retries with idempotency, fail-open or fail-closed, webhook signature verification.
Python
vulnify
The same check and guard model for Python agents, including waiting for a review and the failure mode.
Adapter
OpenAI and Anthropic tool calls
guardedTools: register tools once and route every model tool call through Vulnify.
Adapter
LangChain
guardLangChainTool wraps a LangChain tool so invoke and call are checked first.
Adapter
MCP servers
guardMcpHandler protects a Model Context Protocol tool handler.
Adapter
Any function
guardFunction turns any async function into one that asks Vulnify first.
mcp-server.ts
import { Vulnify, guardMcpHandler } from '@vulnify/sdk';
const vulnify = new Vulnify({ apiKey: process.env.VULNIFY_API_KEY! });
// The tool runs only when Vulnify answers ALLOW.
server.tool('delete_customer', schema, guardMcpHandler(
vulnify,
(args) => ({ agent: 'SupportBot', action: 'DELETE_DATA', resource: 'Customer Database', recordsAffected: 1 }),
deleteCustomer,
));Gateway
No code changes: put the gateway in front
MCP gateway
Agents call tools through Vulnify; each call is decided and logged with the route, tool, decision and latency.
HTTP gateway and credential vault
Registered routes forward to allowed hosts only. API key, Bearer, Basic and OAuth2 client-credentials secrets stay in the vault and are injected on ALLOW; agents never see them.
Alerts and workflow
Send decisions where your team works
Slack
Alerts for reviews, blocks, critical events and anomalies. With the Slack app, approvers approve or deny right in the message.
GitHub
Open an issue for blocked or reviewed actions; it closes when the review is resolved.
Jira
Create a ticket in your project and apply your transitions when the review is approved or denied.
Signed webhooks
HMAC-SHA256 signed deliveries with retries, a delivery log and redelivery.
SIEM export
Security events as JSON or CEF for your SIEM.
REST API
POST /v1/events from any language with an organization API key.
Need something that is not listed? Tell us what you use.
See every agent decision in minutes
Open a personal demo sandbox with sample agents, policies and events, or send your first decision from code.