Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.sigilcore.com/llms.txt

Use this file to discover all available pages before exploring further.

​
Overview

@sigilcore/agent-hooks is the client-side enforcement layer for Sigil. It intercepts an agent’s intended tool call before it executes, submits it to the Sigil Sign /v1/authorize endpoint, and blocks or holds the action based on the policy decision. Without agent-hooks, Sigil Sign governs EVM transactions only. With agent-hooks, Sigil governs any agent action on any framework — bash commands, HTTP requests, file writes, wallet signing, and email sends.

​
Installation

npm install @sigilcore/agent-hooks

​
How It Works

Every tool call an agent attempts is intercepted before execution: 
Agent attempts tool call
        ↓
@sigilcore/agent-hooks
        ↓
POST /v1/authorize → Sigil Sign
        ↓
Policy evaluated against warranty.md
        ↓
APPROVED → tool executes
DENIED   → typed rejection returned to agent
PENDING  → action held for human approval

​
Supported Frameworks

FrameworkIDAdapter
Coinbase AgentKitagentkitcheckAnthropicToolUse
ElizaOSelizacheckElizaAction
USD1 AgentPay (WLFI)agentpaycheckIntent
OpenClawopenclawcheckIntent
NanoclawnanoclawcheckIntent
IronclawironclawcheckIntent
NanobotnanobotcheckIntent
Hermes AgenthermescheckIntent
LangChainlangchainwrapLangChainTool
Claude Code / Anthropic SDKanthropic-sdkcheckAnthropicToolUse
OpenAI Agents SDKopenai-sdkcheckIntent
Any framework(custom)checkIntent (generic)
See the Framework Registry for the full list and custom framework usage.

​
Governed Actions

ActionDescription
bashShell command execution
web_fetchOutbound HTTP requests
file_writeFilesystem writes
wallet_signEVM wallet signing
email.sendOutbound email
wallet.transferEVM token transfers
contract.callEVM contract calls

​
Prerequisites

You need a Sigil API key and a signed warranty.md policy file deployed to Sigil Sign.

​
Fail-Open Behavior

Network errors to the Sigil Sign API result in a fail-open APPROVED decision with a warn log. This is intentional — Sigil is a governance layer, not a kill switch. Agent workflows must not break when Sigil is temporarily unreachable. Operators who require fail-closed behavior should handle the onError callback and implement their own circuit breaker.

​
Source

github.com/Sigil-Core/agent-hooks — MIT License