Documentation

Developer Quickstart

Integrate Actsurance Shield into your agent stack in under 10 minutes.

1. Change your base URL

Point your agent's HTTP client to the Actsurance endpoint instead of the target API. Pass the target API in the x-actsurance-target header.

// Old approach
const res = await fetch("https://api.stripe.com/v1/refunds", {
  method: "POST",
  headers: { "Authorization": `Bearer ${process.env.STRIPE_KEY}` }
});

// With Actsurance
const res = await fetch("https://shield.actsurance.com/v1/proxy", {
  method: "POST",
  headers: {
    "Authorization": `Bearer ${process.env.AGENT_JWT}`,
    "x-actsurance-target": "https://api.stripe.com/v1/refunds"
  }
});

2. Write your policy

Define what the agent is allowed to do. In this example, the agent can issue refunds up to $50. Anything larger requires human approval via an escalation token.

name: customer-support-agent
version: "1.0"
default: DENY

rules:
  - action: stripe_refund
    condition:
      - field: payload.amount
        operator: lte
        value: 5000 # Cents ($50)
    decision: ALLOW

  - action: stripe_refund
    condition:
      - field: payload.amount
        operator: gt
        value: 5000
    decision: ESCALATE
    escalation_target: slack_channel_#approvals

3. Verify the receipt

Every request returns an x-actsurance-receipt header. Use our CLI to verify the Ed25519 signature offline.

$ actsurance verify rec_1a2b3c4d5e

✓ Signature valid (Ed25519)
✓ Hash chain intact (SHA-256)
✓ Policy matched: stripe_refund (ALLOW)
✓ Executed at: 2026-05-11T14:22:11Z

4. Run locally with Docker

Start the firewall and Shield services together for integration testing.

docker compose -f docker-compose.prod.yml up -d --build

Developer Questions

Our friendly team is always here to help you with quick, clear, and reliable answers whenever needed.

Contact Sales

How do developers deploy Actsurance Shield?

Actsurance Shield can be deployed quickly by an engineering team familiar with Docker. The setup involves a sidecar proxy configuration.

What operating systems does Actsurance Shield support?

Actsurance Shield supports Web (SaaS), Linux (selfhosted), containerised via Docker.

What storage model does Actsurance Shield use?

Default development storage is SQLite, production storage is PostgreSQL, and deployment is customer-controlled.

Does Actsurance Shield require third-party cloud storage?

Third-party cloud storage is none mandatory.

Does Actsurance Shield work with OpenAI tool calling?

Actsurance Shield is designed to work with OpenAI tool/function calling workflows.

Want to run it locally?

The developer tier is free and includes a local Docker container for testing.

Get the Docker image

1. Change your base URL

Point your agent's HTTP client to the Actsurance endpoint instead of the target API. Pass the target API in the x-actsurance-target header.

// Old approach
const res = await fetch("https://api.stripe.com/v1/refunds", {
  method: "POST",
  headers: { "Authorization": `Bearer ${process.env.STRIPE_KEY}` }
});

// With Actsurance
const res = await fetch("https://shield.actsurance.com/v1/proxy", {
  method: "POST",
  headers: {
    "Authorization": `Bearer ${process.env.AGENT_JWT}`,
    "x-actsurance-target": "https://api.stripe.com/v1/refunds"
  }
});

2. Write your policy

Define what the agent is allowed to do. In this example, the agent can issue refunds up to $50. Anything larger requires human approval via an escalation token.

name: customer-support-agent
version: "1.0"
default: DENY

rules:
  - action: stripe_refund
    condition:
      - field: payload.amount
        operator: lte
        value: 5000 # Cents ($50)
    decision: ALLOW

  - action: stripe_refund
    condition:
      - field: payload.amount
        operator: gt
        value: 5000
    decision: ESCALATE
    escalation_target: slack_channel_#approvals