Keel.Endpoints.Agents 1.0.0-rc.8

This is a prerelease version of Keel.Endpoints.Agents.
dotnet add package Keel.Endpoints.Agents --version 1.0.0-rc.8
                    
NuGet\Install-Package Keel.Endpoints.Agents -Version 1.0.0-rc.8
                    
This command is intended to be used within the Package Manager Console in Visual Studio, as it uses the NuGet module's version of Install-Package.
<PackageReference Include="Keel.Endpoints.Agents" Version="1.0.0-rc.8" />
                    
For projects that support PackageReference, copy this XML node into the project file to reference the package.
<PackageVersion Include="Keel.Endpoints.Agents" Version="1.0.0-rc.8" />
                    
Directory.Packages.props
<PackageReference Include="Keel.Endpoints.Agents" />
                    
Project file
For projects that support Central Package Management (CPM), copy this XML node into the solution Directory.Packages.props file to version the package.
paket add Keel.Endpoints.Agents --version 1.0.0-rc.8
                    
#r "nuget: Keel.Endpoints.Agents, 1.0.0-rc.8"
                    
#r directive can be used in F# Interactive and Polyglot Notebooks. Copy this into the interactive tool or source code of the script to reference the package.
#:package Keel.Endpoints.Agents@1.0.0-rc.8
                    
#:package directive can be used in C# file-based apps starting in .NET 10 preview 4. Copy this into a .cs file before any lines of code to reference the package.
#addin nuget:?package=Keel.Endpoints.Agents&version=1.0.0-rc.8&prerelease
                    
Install as a Cake Addin
#tool nuget:?package=Keel.Endpoints.Agents&version=1.0.0-rc.8&prerelease
                    
Install as a Cake Tool

Keel.Endpoints.Agents

Safe actions for AI agents on your Keel.Endpoints.Mcp tools: the server, not the agent, makes sure the user agreed before something irreversible happens, and records every write an agent makes.

builder.Services.AddKeelMcp();
builder.Services.AddKeelAgents();     // destructive tools now need the user's confirmation

[Post("solicitudes/{id}/rechazar"), Authorize("analista")]
public sealed class Endpoint(...) : Endpoint<RechazarSolicitud>
{
    public override void Configure(EndpointOptions options) => options
        .ExposeAsTool("Rejects a loan application.", tool => tool.Destructive = true)
        .RequireConfirmation<RechazarSolicitud>(r => $"Reject loan application {r.Id}: {r.Motivo}");
}
Who asks The server, through the MCP client (elicitation in a multi round-trip request, protocol 2026-07-28, stateless)
What the user sees Your message, built from the call's arguments, and a confirm box
Default Every tool with Destructive = true asks; RequireConfirmation adds others, WithoutConfirmation() opts out
Fail-closed No answer, a declined answer or a client that cannot ask: the endpoint does not run
Tamper-proof The pending confirmation is signed (Data Protection), expires (10 minutes) and is bound to the tool, its arguments and the user
Approval RequireApproval(...): people approve through a link (MapKeelApprovals()), four eyes by default, a policy and several approvers if needed; the approved call runs once
Fallback WhenClientCannotConfirm = ConfirmationFallback.Approval: a client that cannot show the confirmation gets a link the same user approves
Audit Every agent call that changes data, every confirmation and every approval goes to IAgentAuditSink (the log by default)

See the agents guide.

Product Compatible and additional computed target framework versions.
.NET net10.0 is compatible.  net10.0-android was computed.  net10.0-browser was computed.  net10.0-ios was computed.  net10.0-maccatalyst was computed.  net10.0-macos was computed.  net10.0-tvos was computed.  net10.0-windows was computed. 
Compatible target framework(s)
Included target framework(s) (in package)
Learn more about Target Frameworks and .NET Standard.

NuGet packages

This package is not used by any NuGet packages.

GitHub repositories

This package is not used by any popular GitHub repositories.

Version Downloads Last Updated
1.0.0-rc.8 50 11/12/2026
1.0.0-rc.7 74 11/1/2026
1.0.0-rc.6 69 11/1/2026
1.0.0-rc.5 71 10/31/2026
1.0.0-rc.4 69 10/31/2026