Getting started

Dvar is a policy firewall for AI agents, tool calls, and MCP connections. It evaluates actions before side effects occur and returns a deterministic allow, deny, or require_approval decision.

Dvar complements application authorization, IAM, sandboxing, secrets management, database permissions, and network policy. It does not replace those controls, and it only protects actions that pass through its interception boundary.

Status

Dvar 0.7 is published through npm's alpha channel. Public contracts remain pre-stable. Review package release notes before upgrading and test policy behaviour before enabling enforcement in production.

Install

npm install @rokadhq/dvar@alpha

Initialize a policy

npx dvar init
npx dvar validate
npx dvar test-policy

The generated policy begins in monitor mode. Monitor mode allows actions while recording the decision Dvar would have made. It is an adoption mode, not protection.

Protect the first tool

Wrap ordinary functions with protectTool(), route MCP calls through the Dvar proxy, or wrap framework tool objects with the relevant adapter. Start with low-risk tools, review evidence, then promote specific boundaries to enforce or strict.