Install
$ agentstack add mcp-secureagentics-adrian ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ● Network access Used
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ● Environment & secrets Used
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
Open-source runtime security monitoring and control for AI agents.
Adrian is an open-source, AARM-aligned runtime security monitoring and control engine for AI agents. It analyses both agent activity logs (tool calls, actions, outputs) and reasoning traces to detect malicious, misaligned, or out-of-remit behaviour, and optionally intervene in-flight. SDKs are available for Python (LangChain) and TypeScript (see [sdk/typescript/README.md](sdk/typescript/README.md)).
Documentation • Dashboard • Discord • LinkedIn
https://github.com/user-attachments/assets/ba50e6e4-fe3e-47b2-aa69-2902e1ef2924
New to Adrian? Check out the Launch Video
Quickstart
> Want the stupidly simple, 60-second hands-off install? Feed your coding agent (Claude, Codex, Cursor, etc.) this file: GETSTARTEDAIGUIDE.md. It will walk you through the installation process - video guide here. Always review instructions manually
The next fastest way to try Adrian is the managed dashboard at app.adrian.secureagentics.ai. Sign-up takes a minute and there is nothing to install beyond the SDK. To run Adrian on your own infrastructure instead, jump to [Self-hosting](#self-hosting) below.
- Sign up at app.adrian.secureagentics.ai and generate an API key.
- Configure Adrian for your agent and your preferences (remit of your agent, audit vs block mode, alerting channels, accepted behaviours vs known-risks).
- Install the SDK:
``sh pip install adrian-sdk ``
- Install LangChain and the provider for your agent's model (the SDK auto-instruments LangChain / LangGraph; pick whichever provider matches your model):
``sh pip install langchain langchain-openai # or langchain-anthropic, etc. # or, in a uv project: uv add langchain langchain-openai ``
langchain pulls langgraph in, so this covers both create_agent and create_react_agent. Last verified 2026-06-24 with langchain==1.3.9, langgraph==1.2.5, langchain-core==1.4.7, langchain-openai==1.3.2. Supported: langchain/langgraph/langchain-openai `>=1.0,=1.2.19,
- Wrap your LangChain agent. Two lines of Adrian (
init+shutdown) bracket your normal LangChain / LangGraph code:
```python import asyncio import adrian from langchain_openai import ChatOpenAI
async def main(): adrian.init(apikey="adrlive_...") llm = ChatOpenAI(model="gpt-4o") response = await llm.ainvoke( "Find the most underpriced recent IPOs and build an investment strategy", ) print(response.content) adrian.shutdown()
asyncio.run(main()) ```
Full runnable version (with env-var checks) at [examples/python/quickstart.py](examples/python/quickstart.py). More complex examples using agents are in [examples/python/](examples/python/).
- Run your agent. Events appear in the dashboard within seconds, classified by severity.
Full guide: Quickstart.
Self-hosting
Adrian supports entirely offline, data sovereign deployments using just a handful of docker commands. This repository ships everything needed to run the entire Adrian stack on a single host: the Go backend (WebSocket + dashboard API + AI engine), the Next.js dashboard, the Python SDK, and a Llama.cpp container that serves a local Gemma model. No managed cloud, no telemetry leaving the box.
> Hardware support: Tested on NVIDIA GPUs with Gemma 4 (E2B / E4B) which is the model the bootstrap picker downloads by default. CPU-only is technically possible but will be slow on real workloads with those sized models.
Prerequisites
- A host with Docker + Docker Compose v2.
- An NVIDIA GPU with recent CUDA driver and the NVIDIA Container Toolkit installed (for the bundled Llama.cpp classifier). ~10 GB free disk for the model.
Bring-up
- Clone:
`` git clone https://github.com/secureagentics/Adrian cd Adrian ``
- Run bootstrap. Creates
data/adrian.db, applies migrations, generates a random admin password, and writes.env. With no--ggufflag, the bootstrap interactively offers to download the recommended on-device classifier (Gemma 4 E4B, ~5 GB, or E2B ~3 GB) into./models/.
```sh # Default: interactive picker downloads Gemma 4 E4B / E2B docker compose --profile setup run --rm setup bootstrap
# Already have a GGUF under ./models/? Pass it by name docker compose --profile setup run --rm setup bootstrap \ --gguf my-model.gguf ```
- Start the stack.
``sh docker compose --profile llm up -d ``
- Open the dashboard. Browse to
http://localhost:3000. Sign in withadmin@localhostplus the password the bootstrap printed; you'll be prompted to set a new one. Create an SDK API key and configure Adrian to monitor your specific agent from Settings → Agents → New key.
- Wrap your agent. The SDK lives in-tree under
sdk/. Install it into a fresh.venvvia the bundled Make target (uses uv):
``sh make sdk-install source .venv/bin/activate ``
Install LangChain and the provider for your agent's model into the same venv:
``sh uv pip install "langchain>=1.0,=1.0,langchain pulls langgraph in, so this covers both createagent and createreact_agent. Last verified 2026-06-24 with langchain==1.3.9, langgraph==1.2.5, langchain-core==1.4.7, langchain-openai==1.3.2`.
Use the same adrian.init snippet as in the [Quickstart](#quickstart) above. The SDK defaults to ws://localhost:8080/ws, so a self-hosted setup needs nothing more than the API key - drop the ws_url= line.
To reset the admin password, change the model and much more check out the dedicated Docs site.
Why Adrian is different
Most agent monitoring stops at activity logs: APIs, MCP, DB interactions, tool calls, etc. Adrian enhances this by also analysing the agent's reasoning: understanding why it took an action, under what context, and what it is planning on doing next. Research by OpenAI and DeepMind found that combining behaviour and reasoning analysis like this boosts detection accuracy by around 35% and is 4x more likely to catch nuanced attacks. Adrian is the first tool to put that into a deployable security control, and it is free, forever.
Furthermore, most tools in this space are lightweight machine learning classifiers trained to spot patterns which match their training data (usually labelled prompt injection datasets). Adrian takes a different approach: it uses world models that understand risk through reasoning like a human does. It correlates behaviours across a session, holds a working understanding of what the agent is meant to be doing, and assesses each new action against that. The detection logic is closer to a human reviewer's than to pattern matching against examples it has been trained to spot. For example, if your e-commerce agent starts resetting user passwords that isn't going to appear in any training dataset, but this is a risk you should be flagging. This is where you get the meaningful security uplift that allows you to use agentic AI with confidence, and it's exactly why we made Adrian.
Architecture
flowchart TD
Agent[Agent runtime] --> SDK[Adrian SDK]
SDK --> Backend[Adrian backend]
Backend --> Classifier[Classifier model]
Classifier --> Verdict{Verdict}
Verdict --> Control[Control plane]
Verdict -.->|"Alert /Human Review /Block"| Agent
Integrations
SupportedOn roadmap
Frameworks
Alerting
Full list: Integrations.
Contributing
See [CONTRIBUTING.md](CONTRIBUTING.md) for the full guide. In short: sign the [CLA](CLA.md), branch off main, follow the PR template, and use British English / no em-dashes in prose.
See [CONTRIBUTORS.md](CONTRIBUTORS.md) for the list of people who have shaped Adrian, and how to add yourself.
Licence
Adrian is released under the [Apache 2.0 licence](LICENSE). New source files should carry the SPDX header from [LICENSEHEADER.txt](LICENSEHEADER.txt).
Community
Featured on
Source & license
This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: secureagentics
- Source: secureagentics/Adrian
- License: Apache-2.0
- Homepage: https://app.adrian.secureagentics.ai/
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.