Safeguard Docs

SDKs

Safeguard publishes no language SDKs yet. Use the hosted MCP server, the CLI, webhooks or the OpenAI-compatible inference API, and treat any package that claims to be a Safeguard SDK as untrusted.

SDKs

Not available yet. Safeguard publishes no official SDK in any language. There is no Safeguard SDK package on npm, PyPI, the Go module proxy, Maven Central or crates.io, and Safeguard has published nothing under the @safeguard or @safeguard-sh npm scopes.

Earlier revisions of this page told you to install SDK packages for Python, TypeScript, Go, Java and Rust that were never published. Don't install a package that claims to be a Safeguard SDK: Safeguard has not published one, so whoever did is not Safeguard.

What to use instead

Query your findings, vulnerabilities, SBOMs and compliance data from code or an agent. Use the hosted MCP server at https://mcp.safeguard.sh/mcp. There is nothing to install: clients connect by URL and sign in with OAuth, or send an MCP key from Settings → Developer as Authorization: Bearer sg_sk_.... Most agent frameworks speak MCP natively.

Scan from a terminal or a CI job. Use the Safeguard CLI. It installs from Safeguard's own installer:

curl -fsSL https://cli.safeguard.sh/install | bash

On Windows, in PowerShell:

irm https://cli.safeguard.sh/install.ps1 | iex

React to events in your own systems. Use webhooks. Each delivery is signed; Signature Verification shows how to check it without an SDK.

Call models through the API Platform. The inference API speaks OpenAI's Chat Completions format, so OpenAI's official Python and Node.js SDKs work with it. See SDKs and clients.

The REST API

There is no public REST API yet either. See API Reference. If you need a language SDK, or an API for something the MCP tools don't cover, email hi@safeguard.sh and we will factor it into that design.

On this page