Strix — open-source packages
This repository is the public release surface for the open-source
pieces of Strix, an execution-control system
for AI agents. Everything here runs locally and needs no Strix account.
The trust primitives — the verifier, the tool-gateway, and the capability
packs — are MIT-licensed; the one MCP runtime adapter
(@strixgov/mcp-adapter) is source-available under Elastic License 2.0
(free to use, not to resell as a competing managed service). See
LICENSING_BOUNDARY.md.
It is a mirror, not the source of truth — the canonical code lives upstream in the Strix monorepo and synchronizes here at release time. See MIRROR.md for the model and CONTRIBUTING.md for how changes flow.
Packages
Source-available here, not yet on npm
These ship their full source and tests in this repo so they can be read and
run, but they are not published to the npm registry — npm install will
not resolve them yet. Listed so the set is complete rather than flattering.
Each package is self-contained under packages/<name>/, at the exact
path its published package.json declares in repository.directory, so
the "Repository" link on every npm page resolves here.
How they fit together
AI agent (Claude Code, Cursor, MCP client, autonomous coder)
│
@strixgov/tool-gateway ← classify + evaluate + sign
(+ capabilities-* registries) every tool call
│
Tool / MCP server
│
Ed25519-signed receipt ──────► @strixgov/verifier
(anyone, offline, no account)
The tool-gateway produces receipts; the verifier proves them. The two capability packs are starter risk classifications you hand to the gateway. The verifier is also what proves Strix's hosted governance evidence — the same primitive, whether the record came from the local gateway or the platform.
Quick start
# Verify a Strix-governed record offline (no install needed)
npx @strixgov/verifier@latest <evidenceId>
# Govern an agent's tool calls locally
npm install @strixgov/tool-gateway
npx strix-gateway init
See each package's own README for the full story.
Independent verify (no Strix account)
Strix (strixgov.com / @strixgov/*, Velaris Group) is an AI agent execution-control / runtime governance kernel:
Allow / Deny / Intercept before side effects. Where signing is enabled, decisions produce Ed25519 evidence
verifiable against public JWKS.
Not the unrelated usestrix/strix pentest agent.
npx @strixgov/verifier@latest 5686
- Walkthrough: https://www.strixgov.com/blog/verify-strix-decision-without-trusting-strix
-
- Specimens: https://www.strixgov.com/proof/cfx-001 · https://www.strixgov.com/proof/cfx-002 demo https://www.strixgov.com/demo/refund
-
- Claim: https://www.strixgov.com/ai-agent-runtime-governance
-
- JWKS: https://www.strixgov.com/.well-known/strix-jwks.json
-
- Browser: https://verify.strixgov.com/
-
-
MCP: https://www.strixgov.com/mcp-action-governance ·
npx @strixgov/mcp-adapter demo -
The verifier verifies receipts; it does not enforce allow/deny. Governing one route does not secure bypass paths.
-
Verify in Claude Code (plugin)
A Claude Code plugin wraps the same verifier as a /strix-verify slash
command, an MCP server, and an opt-in stop hook — so you can verify a
Strix-governed record from inside a session. It vendors
@strixgov/verifier, so it launches offline; Strix is never on the trust
path, and nothing in the plugin decides a verdict (it shells out to the
verifier and relays its exit code).
/plugin marketplace add Strixgov/strix
/plugin install strix-verifier@strixgov
/strix-verify 5686
The marketplace manifest is at this repo's root
(.claude-plugin/marketplace.json) and the plugin lives at
plugins/strix-verifier/. Live verification
fetches the proof record + JWKS from www.strixgov.com; see the
plugin README for fully-offline and
restricted-environment (egress-blocked) options.
Marketing assets
Public-source bundles for the launch material that demonstrates these packages. Pure static HTML + JSX + media — no build step, MIT-licensed, clone-and-host.
See MIRROR.md for how the marketing surface relates to upstream.
Running the test suites
Every package is pure-ESM with no build step and ships its tests:
# all packages
npm test --workspaces --if-present
# one package
cd packages/strixgov-verifier && npm test
License
Two-tier, and frozen in CI (scripts/lint-license-parity.mjs). The open
trust primitives — @strixgov/verifier, @strixgov/tool-gateway, and the
two @strixgov/capabilities-* packs — are MIT; the MCP runtime adapter
@strixgov/mcp-adapter is Elastic License 2.0 (source-available; free
to use, not to resell as a competing managed service). The repository root
is MIT. Each package declares its own license — see LICENSE, each
package's own LICENSE, and LICENSING_BOUNDARY.md.
