Tier 01 — Developers · Open-Core · Free

Ship AI Governance
in Two Lines of Code.

The Vantio Developer SDK is the fastest path to application-layer AI governance telemetry. Install via npm or pip and use the shield() interceptor, or invoke any agent with vantio run — zero code changes required. 10,000 events per month, free. CI blockers statically prevent linguistic logging variables from entering your master branch.

$0/mo
Free forever
10K
Events / month
Async
Non-blocking telemetry
Installation

Two Lines. Any Stack.

TypeScript / Node.js
npm
npm install @vantio/sdk
// Before — unshielded const output = await agent.run(prompt); // After — governed import { shield } from "@vantio/sdk"; const output = await shield(() => agent.run(prompt));
Python
PyPI
pip install vantio-sdk
from vantio import shield # Decorator pattern — zero refactoring @shield async def run_agent(prompt: str): return await agent.run(prompt)
Environment Configuration
# .env VANTIO_API_KEY=vsk_live_••••••••••••••••

Retrieve your VANTIO_API_KEY from the Oracle Dashboard. It is HMAC-signed to your account and scoped to your telemetry namespace.

Capabilities

What the SDK Does

One-Line NPM / PyPI Install

Distributed via the official npm registry and PyPI. Inject application-layer telemetry into any Node.js or Python AI agent stack in seconds — no kernel access, no infrastructure changes required.

Real-Time Telemetry Stream

Every `shield()` call emits a structured telemetry event: model ID, prompt hash, decision verdict, and latency. Events stream to the Oracle UI within 50ms of execution.

Framework-Agnostic Interception

Works with LangChain, AutoGen, CrewAI, AWS Bedrock Agents, and any raw OpenAI/Anthropic API call. The decorator and interceptor patterns require zero changes to your existing agent logic.

Structured Governance Events

Each event is JSON-serialized, HMAC-signed with your VANTIO_TRACE_ID, and posted to the Vantio ingestion endpoint. Your 10,000 free-tier events/month are cryptographically receipted in the Oracle ledger.

Sub-Millisecond SDK Overhead

The `shield()` interceptor introduces predictable, microsecond-scale execution blocking on the synchronous critical path. Telemetry emission is fully async. Production-safe from day one.

SLSA Level 3 Supply Chain

The SDK is MIT-licensed and open-source on GitHub. Every wheel and tgz is produced by an SLSA Level 3 pipeline — keylessly signed with Sigstore/Cosign and committed to the Rekor transparency log. Auditable by your security team before deployment.

Supported Frameworks

LangChain
AutoGen
CrewAI
Bedrock Agents
OpenAI SDK
Anthropic SDK
Technical Disclaimer — Scope of Coverage

Ring-3 application-layer visibility does not equal Ring-0 OS-level enforcement. The Developer SDK operates entirely in user-space (Ring-3). It intercepts application-layer function calls and emits telemetry events. It does not intercept syscalls, attach to kernel LSM hooks, or enforce governance decisions at the kernel level.

Community SLA. No uptime guarantee. For Ring-0 kernel enforcement, see the Enterprise tier. For managed proxy-layer blocking, see the PRO / SMB tier.