Skip to Content

TypeScript SDK

The VeriProof TypeScript SDK requires Node.js 22 or later. It checks policy before a governed action runs and before its result is released, records session evidence, handles signed human review, and can stop an active governed run through its AbortSignal.

Available packages

PackageCategoryFramework support
@veriproof/sdk-coreCore SDKApplication-owned actions
@veriproof/sdk-adapter-anthropicEnforce adapterAnthropic SDK 0.126.0
@veriproof/sdk-adapter-expressEnforce adapterExpress 5.1.0
@veriproof/sdk-adapter-fastifyEnforce adapterFastify 5.6.2
@veriproof/sdk-adapter-genkitEnforce adapterGenkit 1.42.0
@veriproof/sdk-adapter-google-aiEnforce adapterGoogle GenAI 2.22.0
@veriproof/sdk-adapter-langchainjsEnforce adapterLangChain.js 1.5.11
@veriproof/sdk-adapter-llamaindexEnforce adapterLlamaIndexTS 0.12.1
@veriproof/sdk-adapter-mastraEnforce adapterMastra 1.51.0
@veriproof/sdk-adapter-nextjsEnforce adapterNext.js 16.2.10
@veriproof/sdk-adapter-openai-agentsEnforce adapter@openai/agents 0.3.9
@veriproof/sdk-ai-sdkEnforce adapterVercel AI SDK 7.0.51

Adapters install their required Core SDK dependency automatically.

What the core package includes

  • Veriproof.fromEnv() and new Veriproof(options) for one application-scoped client.
  • govern(actionName, input, action, options) with typed results and a review_required checkpoint.
  • HumanReviewRuntime with save, receive, resume, and reconcile over an application-owned durable store.
  • Industry.fact(...) and generated industry vocabularies under @veriproof/sdk-core/industries/*.
  • VeriproofTestHarness under @veriproof/sdk-core/testing for network-free tests.
  • Lower-level transport, sensitive data, and policy-contract helpers under @veriproof/sdk-core/advanced.

Start using the SDK

Open Tools and SDKs in the VeriProof portal, select TypeScript, and follow its installation instructions. Start with @veriproof/sdk-core, then add the adapter for each framework your application uses.

Set the application SDK key as VERIPROOF_API_KEY. Hosted VeriProof uses https://ingest.veriproof.app. VeriProof Private uses the ingest API base URL for that instance as VERIPROOF_ENDPOINT. The same endpoint handles session ingest and policy checks.

Use the TypeScript core guide for setup and governed-action examples. Check SDK categories and framework coverage for what each adapter controls and what stays with the core governed-action helper.

Last updated on