Control agent actions in production. Start in 14 days, without a card.

Subscribe for capacity. Pay per call when that is better.

Subscriptions and x402 are both first-class. Start Starter, Developer, Studio or Fleet with a 14-day trial — No card required. Add a payment method only if you decide to keep the subscription; otherwise the trial cancels safely. Agents can also use HumanMirror without a monthly plan through x402.

Put HumanMirror in the action path with one guarded fetch.

guardedFetch() creates a signed HumanMirror transaction binding before a consequential HTTP action, executes only after an ALLOW decision, then closes the binding as MATCH or DRIFT. The request body and query string stay client-side: HumanMirror receives structural metadata and SHA-256 digests, not your bearer tokens or raw payload. The binding endpoints require no HumanMirror account; production policy, fleet capacity and enterprise governance are paid layers.

import { createHumanMirror } from "@humanmirror/sdk";

const hm = createHumanMirror();

const response = await hm.guardedFetch(
  "https://vendor.example/orders",
  {
    method: "POST",
    headers: {
      "content-type": "application/json",
      "authorization": `Bearer ${process.env.VENDOR_TOKEN}`
    },
    body: JSON.stringify(order)
  },
  {
    intent: {
      objective: "Create approved vendor order",
      actor: "agent",
      amount: 25,
      currency: "USDC",
      destination: "0xApprovedVendor",
      constraints: { max_amount: 50 }
    },
    payment: {
      rail: "x402",
      amount: 25,
      currency: "USDC",
      destination: "0xApprovedVendor"
    }
  }
);

console.log(response.humanmirror.binding.decision); // ALLOW
console.log(response.humanmirror.closure.verdict);  // MATCH

MCP 2026: guard a tool call without moving credentials.

guardedMcpFetch() reads the official MCP routing metadata (Mcp-Protocol-Version, Mcp-Method and optional Mcp-Name), sends only structural metadata plus request digests to the Universal Authorization Envelope, executes the original MCP request only after ALLOW, then closes the action as MATCH or DRIFT. The same neutral authorization surface can carry declared contexts from AP2 · UCP · MCP · A2A without claiming native protocol conformance or replacing the original authorization authority.

const response = await hm.guardedMcpFetch(
  "https://mcp.vendor.example/mcp",
  {
    method: "POST",
    headers: {
      "content-type": "application/json",
      "authorization": `Bearer ${process.env.VENDOR_TOKEN}`,
      "Mcp-Protocol-Version": "2026-07-28",
      "Mcp-Method": "tools/call",
      "Mcp-Name": "orders.create"
    },
    body: JSON.stringify(rpcCall)
  },
  {
    intent: { objective: "Create approved order", actor: "agent" },
    authorization: { scope: "orders:write" },
    policy: { max_amount: 50 }
  }
);

console.log(response.humanmirror.binding.decision); // ALLOW
console.log(response.humanmirror.closure.verdict);  // MATCH

For passive adoption first, HumanMirror Reflex remains a free fail-open Shadow Mode: POST /api/reflex/check/. No useful intervention = no charge.

Normalize → route → retry → fail over → preserve → replay.

The SDK stays client-side, so HumanMirror does not become an arbitrary open proxy. Compatible endpoints are explicitly configured by the developer or agent runtime.

import { createHumanMirror } from "@humanmirror/sdk";

const hm = createHumanMirror();
const result = await hm.request("/api/one/run/", {
  method: "POST",
  payload: task,
  idempotent: true
});

from humanmirror import create_humanmirror

hm = create_humanmirror()
result = hm.request(
    "/api/one/run/",
    method="POST",
    payload=task,
    idempotent=True,
)

# Node / TypeScript source
curl -fsSLo humanmirror.mjs https://humanmirror.fr/packages/humanmirror-sdk-js/index.js

# Python source
mkdir -p humanmirror && curl -fsSLo humanmirror/__init__.py https://humanmirror.fr/packages/humanmirror-sdk-python/humanmirror/__init__.py

X-Metrics-Sync: 1X-Request-IdIdempotency-Keylocal replayPANGI-ready

Environment-aware by default.

HUMANMIRROR_API_KEY=...
HUMANMIRROR_BASE_URL=https://humanmirror.fr
HUMANMIRROR_FAILOVER_URLS=https://edge-a.example,https://edge-b.example
HUMANMIRROR_QUEUE_PATH=.humanmirror/transport-queue.jsonl

The SDK also reads .humanmirror.json. Environment variables take precedence, making the same package portable across local bots, CI runners, containers and fleet workers.