End-to-end encrypted approval requests, delivered to your phone in real time. Biometric signing. Full audit trail. Zero-knowledge relay.
SDK / MCP
Zero-knowledge
Your phone
Getting started
No server infrastructure required. No cloud accounts to configure.
Scan a QR code with the HARP mobile app. X25519 keys are exchanged via Diffie-Hellman. The relay never sees them.
Your agent encrypts the action context with XChaCha20-Poly1305 and sends the opaque envelope through the relay to your phone.
Review the action, authenticate with Face ID or fingerprint. Your signed response flows back. Agent proceeds. Seconds, not minutes.
Security first
Every design decision in HARP serves one goal: your approval data stays yours.
XChaCha20-Poly1305 encryption with X25519 key exchange. The relay, the network, and even HumanAuth itself never see your approval context, parameters, or reasoning. Cryptographic privacy by default.
The relay is a dumb pipe by design. It routes opaque encrypted blobs and knows nothing about their contents. Self-host it, or use the managed relay. Either way, your data stays unreadable.
Works with Claude Code, OpenAI agents, LangChain, custom agents, or anything that speaks HTTP.
Three lines of config. Any MCP-compatible agent gets an authorize tool automatically.
Approvals signed with Ed25519 keys protected by Face ID or fingerprint. Cryptographic non-repudiation.
Both sides retain full plaintext independently. Export logs for SOC 2, HIPAA, or SOX compliance.
Integration
Choose your integration: zero-config MCP or full SDK control.
{
"mcpServers": {
"harp": {
"command": "npx",
"args": ["@humanauth/mcp"]
}
}
}import { Authorizer } from "@humanauth/sdk";
const auth = new Authorizer(pairing);
const result = await auth.requestApproval({
action: "deploy_production",
description: "Deploy v2.1 to prod",
parameters: { service: "api", version: "2.1.0" },
ttl: 300,
});
if (result.decision === "approved") {
await deployToProduction();
}HARP (Human Authorization Relay Protocol) is the open standard behind HumanAuth. MIT licensed. Self-hostable. Built for interoperability.
No vendor lock-in. Run the relay on your own infrastructure, use any compatible client, build your own integrations.
Pricing
Self-host free forever, or use the managed relay.
For individuals and experiments
For teams shipping with agents
For orgs with compliance needs