@marmarlabs/agentbridge-sdk

SDK for declaring AgentBridge actions and emitting AgentBridge manifests in any JavaScript/TypeScript app.

Use this if you have a Next.js / Express / Hono / Fastify app and want AI agents to call its actions safely.

Install

npm install @marmarlabs/agentbridge-sdk @marmarlabs/agentbridge-core zod

What's inside

• defineAgentAction(spec) — Zod-first action definition. Compiles your Zod input/output schemas into JSON Schema for the manifest while keeping full type inference at the call site.
• createAgentBridgeManifest(spec) — assemble a full manifest from a list of actions.
• createActionHandler(action, handler) — wraps a Next.js / Express handler with input validation against the declared schema.
• z — re-export of zod for convenience.

Quick example

import {
  defineAgentAction,
  createAgentBridgeManifest,
  z,
} from "@marmarlabs/agentbridge-sdk";

export const inviteUser = defineAgentAction({
  name: "invite_user",
  title: "Invite a user",
  description: "Sends an invite email to a new user.",
  method: "POST",
  endpoint: "/api/agentbridge/actions/invite_user",
  risk: "medium",
  requiresConfirmation: true,
  inputSchema: z.object({
    email: z.string().email(),
    role: z.enum(["admin", "member"]),
  }),
  outputSchema: z.object({ inviteId: z.string() }),
  permissions: [{ scope: "users:invite" }],
  examples: [{ input: { email: "[email protected]", role: "member" } }],
  humanReadableSummaryTemplate: "Invite {{email}} as {{role}}",
});

export const manifest = createAgentBridgeManifest({
  name: "Acme",
  version: "1.0.0",
  baseUrl: "https://acme.example",
  contact: "[email protected]",
  actions: [inviteUser],
});

See examples/nextjs-basic for a complete Next.js integration walkthrough.

Status

Public release. v0.2.2 is a docs-only release that adds OpenAI Codex onboarding alongside the existing Claude Desktop / Cursor / custom client setup paths — no code or behavior changes since v0.2.0. AgentBridge is suitable for local development, manifest authoring, scanner workflows, OpenAPI import, and MCP experiments. It is not yet production security infrastructure.

The SDK surface is intentionally small and stable for the v0.x line.

License

Apache-2.0