@auraprotector/agent

In-process bot-mitigation agent for Node.js runtimes. Connects to the AuraGuardian cloud to enforce real-time threat detection, IP reputation, and adaptive content protection rules.

Installation

npm install @auraprotector/agent

Express Middleware

import express from 'express';
import { ultimateProtectorExpress } from '@auraprotector/agent/express';

const app = express();

app.use(ultimateProtectorExpress({
  licenseKey: process.env.UP_LICENSE_KEY,
  apiUrl: process.env.UP_API_URL,
}));

app.get('/', (req, res) => res.send('ok'));
app.listen(3000);

Zero-Code Preload

If you prefer not to modify application code, preload the agent via NODE_OPTIONS. The agent will auto-wrap Node's HTTP server request listener (fail-open on error).

export UP_LICENSE_KEY='UP_LIVE_...'
export UP_API_URL='https://app.auraguardian.co/api'
export NODE_OPTIONS='--require @auraprotector/agent/preload'

node server.js

Configuration

| Option | Type | Default | Description | |---|---|---|---| | licenseKey | string | — | Required. Your AuraGuardian license key. | | apiUrl | string | — | Required. API endpoint, e.g. https://app.auraguardian.co/api | | syncIntervalSeconds | number | 60 | How often to re-fetch rules from the cloud. | | allowSampleRate | number | 0.01 | Telemetry sampling rate for ALLOW decisions. | | onlyPaths | string[] | — | Exact (/checkout) or prefix (/product/*) path whitelist. | | exceptPaths | string[] | — | Paths to exclude from protection. | | onlyRegex | string | — | JS regex source, e.g. ^/checkout or /.../flags. |

Requirements

• Node.js ≥ 18
• Express ≥ 4 (for middleware mode)
• Active AuraGuardian license

Security

If you discover a security vulnerability, please report it to [email protected]. Do not open a public issue.

License

Proprietary — see LICENSE for details.