Skip to content
TruCore logoTruCore

Quickstart

5-Minute Developer Quickstart

Run one command to see a deterministic decision and receipt.

Single Command Quickstart

Run one command. Get a deterministic decision + receipt hash.

Safe to try. No wallet needed. Takes ~5 seconds.

CLI pinned: @trucore/atf@v1.5.1

v1 launch mode

  • This CLI version is pinned for reproducibility.
  • Simulator is deterministic and produces verifiable receipt hashes.
  • Use /verify to validate integrity; signatures may be enabled depending on environment.
npm install -g @trucore/atf@v1.5.1
atf trade
What you'll see
{
  "ok": true,
  "result": {
    "status": "allowed",
    "reason": "Request satisfies demo policy limits.",
    "receipt_hash": "3f8a...",
    "invariant_checks": [
      "amount <= 1000: pass",
      "max_slippage_bps <= 300: pass",
      "ttl_seconds <= 300: pass"
    ]
  }
}

# denied responses exit with code 2 (CLI)

Paste the receipt hash into /verify to confirm deterministic integrity.

Verify a receipt hashIntegration pattern

1. Get an API Key

Request a partner key from TruCore for higher quota and partner onboarding.

You can also use the public tier without a key at 30 requests per minute.

Already have a key? Open your portal to see your keys and usage, or skip to First Protected Trade.

2. Make a Request

curl

BASE_URL="${BASE_URL:-http://127.0.0.1:3000}"
curl -sS "$BASE_URL/api/simulate" \
  -H "Content-Type: application/json" \
  -d '{
    "action": "swap",
    "token_in": "SOL",
    "token_out": "USDC",
    "amount": 10,
    "max_slippage_bps": 100,
    "ttl_seconds": 60
  }'

Runs locally by default. Set BASE_URL=https://trucore.xyz to run against production.

Rate-limit headers returned by the API:

  • X-RateLimit-Limit
  • X-RateLimit-Remaining
  • X-RateLimit-Reset

3. What You Should See

  • status returns allowed or denied.
  • receipt_hash gives a deterministic digest for the decision.
  • invariant_checks lists each invariant check outcome.

For field-level contract details, see Permit Schema v1 and compare against the Demo Policy.

4. Why This Matters

ATF enforces policy before execution and generates deterministic receipts for auditability.

Ready to protect a real bot intent? Follow the First Protected Trade guide for the full protect → receipt → verify flow with HTTP, Python, TypeScript, CLI, or OpenClaw.

Continue with ATF Architecture & Enforcement Model for threat model and invariant details.

Category definition: Agent Transaction Firewall.