TrigGuard CLI

Install. Authorize. Verify.

Authority from your terminal.

trigguard · machine path: npx trigguard demo · live path: console account + TRIGGUARD_API_KEY + authorize().

zsh - trigguard

$ npm install trigguard
added 1 package in 2s

$ npx trigguard demo
TrigGuard demo
Authorizing deploy.release...
Decision: PERMIT
Receipt: VERIFIED
✓ TrigGuard is working

Quickstart

Under 2 minutes from install to verified receipt

Machine onboarding: npm install trigguard then npx trigguard demo (no API key). Human / live onboarding: console account, TRIGGUARD_API_KEY, then live authorize() or advanced tg commands.

1
Install

Canonical package. Requires Node.js 18+.
install
```
$ npm install trigguard
```
2
Demo

Machine onboarding - offline PERMIT and verified receipt. No API key required. For live auth later: create a key at console.trigguardai.com and set TRIGGUARD_API_KEY (optional tg login).
demo
```
$ npx trigguard demo
```
3
Authorize (live)

Live path only - set TRIGGUARD_API_KEY first. Without credentials, authorize() may return SILENCE with no receipt. Decisions: PERMIT, DENY, ESCALATE, SILENCE.
authorize
```
$ tg authorize \
  --surface deploy.release \
  --actor demo \
  --intent "test deployment"
```
4
Verify

Independent offline verification for a live receipt. Inspect receipts in the receipt explorer. Independent verification · Receipt schema
verify
```
$ tg verify --execution-id exec_xxxxx
```

Terminal demo

First verified receipt

zsh - trigguard demo

$ npm install trigguard
$ npx trigguard demo

TrigGuard demo
Authorizing deploy.release...
Decision: PERMIT
Receipt: VERIFIED
✓ TrigGuard is working

# Live path (credentials required):
$ export TRIGGUARD_API_KEY=tg_live_…
$ tg authorize \
  --surface deploy.release \
  --actor demo \
  --intent "test deployment"
$ tg verify --execution-id exec_xxxxx

Security

Security guarantees

Device Authentication

Browser-based login with secure device authorization flow.

Cryptographic Signatures

receipts verifiable offline.

Receipt Verification

Independent validation without dashboard dependency.

Fail-Closed Security

No receipt, no execution path.

Full security model →

Next steps

Under 2 minutes from install to verified receipt

Install

Demo

Authorize (live)