Cookbooks
Practical, step-by-step guides for integrating Checkpoint into your applications
Welcome to Checkpoint Cookbooks
Cookbooks are hands-on, scenario-based guides that walk you through specific integrations from start to finish. Unlike general documentation, cookbooks focus on doing — with real code, real configurations, and real outcomes.
New to Checkpoint? Start with Core Concepts for the mental model, then return here for implementation guides.
Featured: identiclaw
Deploy your first AI agent with its own cryptographic identity in under 10 minutes. Connect it to Telegram and start chatting.
Choose Your Path
Checkpoint offers three complementary capabilities. Not sure which fits your integration? See Choose Your Integration for the canonical decision guide. Otherwise, pick the capability that matches your goal:
Detect — Know What's Visiting Your Site
Passive AI agent detection for analytics and visibility. No blocking, just intelligence.
Pixel Quick Start
5 min · Marketing sites, CMS, no-code.
Beacon Integration
15 min · SPAs, React/Vue apps.
Middleware Detection
20 min · Next.js/Express server-side.
Identify Users
15 min · Attributing AI sessions to real users.
Enforce — Block Unwanted Agents
Active detection plus policy enforcement. Block, redirect, or challenge detected agents.
Gateway Setup
10 min · Any domain, zero code.
Gateway + Origin Sidecar
10 min · Domains already live on Vercel/Netlify/DreamHost/etc.
Middleware Enforcement
20 min · Next.js/Express apps.
Policy Configuration
15 min · Fine-tuning enforcement.
.NET Cedar Policy + Consent
10 min · ASP.NET Core / .NET Framework apps.
Govern — Authorize AI Agents
Deploy KYA-OS servers to grant controlled access to verified AI agents.
Dashboard Deploy (Managed)
15 min · Quick start, one-click setup.
Self-Host (BYOK)
30 min · Full control, custom infra.
MCP to KYA-OS Migration
25 min · Existing MCP servers.
Quick Decision Matrix
Not sure where to start? Use this matrix:
Cookbook Conventions
All cookbooks follow the same structure:
- Goal — What you'll achieve
- Prerequisites — What you need before starting
- Time Estimate — How long it takes
- Steps — Numbered, actionable instructions
- Verify — How to confirm it's working
- Troubleshooting — Common issues and fixes
- Next Steps — Where to go from here
Code examples are copy-paste ready. SDK environment variables use the CHECKPOINT_ prefix; the Govern worker/deploy/self-host plane uses the separate AGENTSHIELD_ prefix for the same credentials — see Credentials for which one applies where.
Need Help?
- Dashboard: Real-time logs and analytics at kya.vouched.id
- Discord: Join our community for questions
- Support: kya@vouched.id
Ready? Pick a cookbook above and let's build something.