a2a-trustgate

Safety, compliance, and governance for AI agents. Screen every action before it executes.

Install

npm install -g a2a

Quick Start

# Create a tenant (agent-first — human pays $1 to activate)
a2a signup my-company --local

# Screen a command
a2a eval "rm -rf /tmp/cache"
# ✓ ALLOWED: rm -rf /tmp/cache

a2a eval "rm -rf /"
# ✗ BLOCKED: Filesystem destruction pattern detected

# Check your usage
a2a status

Usage

# Evaluate commands
a2a eval "SELECT * FROM users"              # Screen SQL
a2a eval "command" --gate2 skip             # Gate 1 only (fast)
a2a eval "command" --json                   # Raw JSON output

# Pipelines
a2a pipelines                               # List pipelines
a2a pipeline create "my-pipeline"           # Create pipeline
a2a pipeline ID task "echo hello"           # Submit task

# Audit
a2a audit                                   # Recent events
a2a audit export --format csv               # Export trail

# Approvals
a2a approvals                               # Pending approvals
a2a approve TASK-ID                         # Approve action

Exit Codes

| Code | Meaning | |------|---------| | 0 | Allowed — safe to execute | | 1 | Blocked — do not execute | | 2 | Needs review — Gate 2 self-evaluation required |

Scripting

if a2a eval "rm -rf /tmp/cache" --json 2>/dev/null; then
  rm -rf /tmp/cache
fi

Authentication

API key resolution (first match wins):

1. --key flag
2. A2A_API_KEY environment variable
3. ./.a2a/config.json (project-local)
4. ~/.a2a/config.json (global)

# Store globally
a2a login

# Store per-project
a2a login --local

Links

• Website: a2ainfrastructure.com
• Docs: a2ainfrastructure.com/docs
• Quickstart: a2ainfrastructure.com/quickstart

Licence

Proprietary — see LICENSE. Copyright (c) 2026 Tyga.Cloud Ltd.