Quickstart
Get started with AER
Four steps take you from nothing to a signed record of what your agent did. The collector watches tool calls, HTTP requests and LLM turns, and AER signs the whole trace when the session ends.
Request access
Tell us about the agent you want to record. We provision a tenant, an agent and an API key and send them back over a secure channel.
Request accessInstrument
One command wires the auto-instrumentation collector into your Node project. Paste your key into the environment and you are ready to run.
npx @adastracomputing/aer init export AER_API_KEY=...
Run
Start your agent with the collector preloaded. Events stream to the console live while the agent runs.
node --import @adastracomputing/aer-auto-node/register your-agent.js
Verify
When the session completes AER signs the record. Anyone can check the signature, no key required.
aer verify <aer-id>
Beyond recording
Protect an MCP resource
The steps above record what an agent did. AER can also gate what an agent is allowed to reach. A running session mints a short-lived attestation token, and a protected MCP server admits only requests that carry a valid, non-revoked one. A rogue agent that does not run the collector has no token and is denied. AER stays out of the request path: the resource verifies offline against the published JWKS.
Resource side (Hono shown)
import { honoMcpGuard } from '@adastracomputing/aer-mcp-guard/hono';
app.use('/mcp/*', honoMcpGuard({ audience: 'mcp://payments-prod' }));The agent side is zero code: name the host in the collector config and it attaches the attestation automatically. The Attestation console mints verifier keys and revokes tokens.
Full guides and the API reference are available once you have access.