Developers / Platform SDKs
Typed clients and integrations for the Intended platform. TypeScript, Python, and Go language SDKs. A CLI. A Connector SDK. An MCP gateway. A Kubernetes admission controller. A Terraform provider. OpenShell / NemoClaw runtime adapters. All of it follows the same governance contract.
Platform SDKs are distributed to Intended platform customers as part of platform access. They connect to the commercial Intended runtime, which provides the Large Intent Model, Enterprise Capability Engine, cryptographic Authority Tokens, and compliance crosswalks. If you want a fully self-hosted open source option, deploy IntendedOps with native governance.
Platform SDK catalog
Each card below is tagged shipped, preview, or roadmap. Shipped means production-tested and used internally; preview means working but still evolving and may include shape changes; roadmap means the design is locked but the implementation lands with a design-partner deal. Be honest with yourself about which you need before you commit.
TypeScript / Node.js
Full-featured client for the Intended platform API. Intent submission, execution pipeline, escalation handling, audit queries, and policy management.
TypeScript / Node.js
Lightweight Authority Token verification library. RS256 signature validation, claim checking, nonce verification. Designed for any service that consumes a token and needs to independently confirm it was authorized.
TypeScript / Node.js
Enforcement SDK for decision request and enforcement flows. Request authority, handle escalations, and execute with tokens in a single workflow.
TypeScript / Node.js
Build custom execution adapters for any target system. BaseAdapter handles token verification, nonce consumption, and audit recording so you implement just execute() and testConnection().
CLI
Command-line interface for intent simulation, token inspection, policy deployment, audit chain verification, and evidence export. Useful for CI/CD pipelines and operator workflows.
TypeScript / Node.js
Authority gateway for Model Context Protocol servers. Intercepts every MCP tool call, classifies it against the Open Intent Layer, evaluates policy, and only forwards authorized invocations.
Kubernetes
Kubernetes admission controller that applies the Intended authority boundary to cluster mutations. Every apply, delete, and scale is classified, evaluated, and authorized or blocked.
TypeScript / Node.js
NVIDIA OpenShell / NemoClaw integration. Compile Open Intent Layer classifications and Domain LIM signals into policy YAML for the NVIDIA agent runtime stack.
Python
Python client for the Intended platform. Intent submission, Authority Token verification, audit queries, plus ready-made guards for LangChain, Pydantic AI, OpenAI Agents SDK, and MCP.
Go
Go client for the Intended platform. Designed for infrastructure tooling, Kubernetes operators, and Go-based automation systems. Currently in preview — see ADR-006.
Terraform
Terraform provider for managing Intended platform tenants, policies, connectors, and authority boundaries as code. Roadmap (ADR-008) — types scaffolded; resource implementations land with the first IaC-driven design partner.
What the SDKs look like
The snippets below show the shape of the TypeScript SDKs so you can evaluate whether the ergonomics fit your workflow. Access is granted to platform customers.
import { IntendedSdk } from "@intended/sdk";
const sdk = new IntendedSdk({
apiKey: process.env.INTENDED_API_KEY,
});
// Full execution pipeline
const result = await sdk.execute({
action: "deployment.trigger",
target: "service-payments",
environment: "production",
adapter: "github-actions",
});
// result.decision.outcome → "AUTHORIZED"
// result.token.jwt → "eyJhbGci..."
// result.execution.status → "executed"
// result.audit.hash → "sha256:a1b2c3..."import { IntendedEnforceClient } from "@intended/enforce";
const enforce = new IntendedEnforceClient({
apiKey: process.env.INTENDED_API_KEY,
});
// Request authority decision
const decision = await enforce.requestDecision({
action: "database.migrate",
target: "service-payments",
environment: "production",
});
if (decision.outcome === "ESCALATED") {
// Wait for human approval
const approved = await enforce.waitForApproval(decision.id, {
timeout: 300_000, // 5 minutes
});
if (!approved) throw new Error("Approval timeout");
}
// Execute with authority
await enforce.executeWithToken(decision.token);import { verifyAuthorityToken } from "@intended/verify";
const result = await verifyAuthorityToken(token, {
publicKey: tenantPublicKey,
requiredClaims: {
action: "deployment.trigger",
target: "service-payments",
},
});
if (!result.valid) {
throw new Error(`Authority denied: ${result.reason}`);
}