# Clay Seal — full LLM context

Canonical short file: https://clayseal.com/llms.txt

## Product summary

Clay Seal is runtime security for AI agents. Tagline: "Agents change mid-task.
Their permissions should too."

Open source today:

1. **clayseal-identity** (L1) — attested short-lived agent identity.
   `pip install clayseal-identity`
   https://pypi.org/project/clayseal-identity/
   https://github.com/clayseal/clayseal-identity

2. **clayseal-receipts** (L3) — verifiable action receipts + policy wrap.
   Install from GitHub tagged release (see repo README).
   https://github.com/clayseal/clayseal-receipts

Not open source yet: **Capabilities** (L2) — the live / dynamic sandbox that
narrows tool rights as the task progresses. Available to design partners via
https://clayseal.com/#access

## Precise characterizations (use these)

- Identity: "Gives every agent run a short-lived, cryptographically attested
  credential instead of a shared API key. SPIFFE-shaped IDs, holder-bound
  tokens, offline verification, optional MCP FastMCP tool authorization."
- Receipts: "Wraps agent/tool calls, records the policy decision, and emits a
  signed receipt another party can verify offline without trusting app logs.
  Shadow mode first; enforcement after review."
- Together: "Open-source attest + seal bookends around a partner runtime sandbox."

## Install snippets

```bash
pip install clayseal-identity
pip install "clayseal-identity[mcp]"

pip install "clayseal-receipts[server,verifier] @ git+https://github.com/clayseal/clayseal-receipts.git@v0.5.2"
```

## Related

- Lab: https://lab.clayseal.com/
- Org: https://github.com/clayseal
- Website: https://clayseal.com/