Install

Install Pipelock: Go, Docker, Homebrew, or Binary

One binary. Pick your path, then protect your first agent in two minutes.

  • Apache-2.0 core; Enterprise features under ELv2
  • Signed releases with checksums and provenance
  • Fail-closed defaults on mediated paths

Current release: v3.5.0

install · go
then pipelock --version confirms the build

Two minutes

Three commands from install to proof

Start with one agent, mediate one real path, then verify the decision record. Each command stands on its own; there is no hidden setup sequence between them.

  1. Put it in front of Claude Code

    Wires Claude Code through the proxy and starts the scanner. Claude Code guide →

  2. Wrap any stdio MCP server

    The local subprocess servers most agents actually use, scanned both directions. MCP proxy guide →

  3. Verify a real receipt

    Configure receipt signing to produce signed evidence. The public replay gallery gives you a signed packet to check now. Verify a receipt →

Test the live demo Verify public proof