Give every agent a place to live.

import { Temper, verifyWebhook } from "@temper-hq/sdk";

const temper = new Temper({ apiKey: process.env.TEMPER_API_KEY });

// One secure computer per end user
const env = await temper.environments.create({ end_user_id: "user_8f2c" });

// Risky actions arrive as signed webhooks
app.post("/webhooks/temper", async (req, res) => {
  const event = await verifyWebhook(secret, req.rawBody, req.get("temper-signature"));
  res.sendStatus(200);

  if (event.type === "approval.requested") {
    const { approval_id, summary } = event.data;
    (await askYourUser(summary))
      ? await temper.approvals.approve(approval_id, { kind: "once" })
      : await temper.approvals.deny(approval_id);
  }
});

from temper_hq import Temper, verify_webhook

temper = Temper()  # reads TEMPER_API_KEY

# One secure computer per end user
env = temper.environments.create(end_user_id="user_8f2c")

# Risky actions arrive as signed webhooks
@app.post("/webhooks/temper")
async def webhook(request: Request):
    event = verify_webhook(SECRET, await request.body(),
                           request.headers.get("temper-signature"))
    if event.type == "approval.requested":
        approval = event.data
        if await ask_your_user(approval["summary"]):
            temper.approvals.approve(approval["approval_id"], {"kind": "once"})
        else:
            temper.approvals.deny(approval["approval_id"])
    return {"ok": True}

import temper "github.com/temper-hq/sdk-go"

client, _ := temper.New(temper.WithAPIKey(os.Getenv("TEMPER_API_KEY")))

// One secure computer per end user
env, _ := client.Environments.Create(ctx, temper.CreateEnvironmentParams{
	EndUserID: "user_8f2c",
})

// Risky actions arrive as signed webhooks
func handleWebhook(w http.ResponseWriter, r *http.Request) {
	body, _ := io.ReadAll(r.Body)
	event, err := temper.VerifyWebhook(secret, body,
		r.Header.Get("Temper-Signature"), 0, time.Time{})
	if err != nil {
		http.Error(w, "bad signature", http.StatusBadRequest)
		return
	}
	w.WriteHeader(http.StatusOK)

	if event.Type == "approval.requested" {
		var a struct {
			ID      string `json:"approval_id"`
			Summary string `json:"summary"`
		}
		json.Unmarshal(event.Data, &a)
		if askYourUser(a.Summary) {
			client.Approvals.Approve(ctx, a.ID, temper.OnceScope())
		} else {
			client.Approvals.Deny(ctx, a.ID)
		}
	}
}