Wrap the tools your agent already uses.
Pick the framework. Put policy on the risky workflow your buyer worries about. Veto returns allow, review, or deny before execution and records the decision.
One insertion point: the agent tool path.
npm i veto-sdk, pnpm add veto-sdk, or bun add veto-sdk.protect() or Veto.wrap().LLM SDKs
Wrap tools passed to `chat.completions.create`. Decide before the function call executes.
Intercept `tool_use` blocks from the Anthropic SDK and Claude Agent SDK before the call executes.
Function-declaration-aware policy evaluation for Google Gemini tool calls.
Authorize Bedrock action groups and Lambda-backed tools before agent execution.
Wrap Cohere tool calls with policy before the model-driven action dispatches.
Evaluate Groq tool calls locally before low-latency agents touch systems of record.
Put policy around Mistral function calls and tool paths before dispatch.
Gate tool calls from open-model workflows running through Together AI.
Agent frameworks
Streaming-compatible policy checks for Vercel AI SDK tool calls.
Policy at the Mastra tool or workflow step before the governed call runs.
Python guide for wrapping AutoGen tool calls before execution.
Python guide for wrapping CrewAI tools before multi-agent workflows act.
Python guide for checking DSPy modules and ReAct tool calls on the tool path.
Python guide for authorizing Haystack agent tools before data moves.
Wrap LangChain tools and chains with allow, review, or deny decisions.
Put policy on LangGraph ToolNodes and graph context before execution.
Preview typed-tool authorization patterns for PydanticAI agents.
Guide for checking Semantic Kernel plugins before side effects.
Browser automation
Protocols
Veto SDKs
Related resources
Taxonomy of guardrail approaches: input, output, dialog, and the tool path where Veto sits.
Can vs May: agent authorizationAuthentication, access control, and runtime authorization, and where each control point sits in the stack.
Compare control pointsControl matrix against NeMo, Guardrails AI, Lakera, and more.
Pick a high-blast-radius workflowFinance wires, healthcare records, DevOps deploys, support refunds, enterprise prod changes.
Don't see your framework?
The core SDK wraps tool calls in common language runtimes. If your system exposes tools through a wrapper, Veto can decide the governed calls.