armorClaude

ArmorClaude

ArmorIQ intent-based security enforcement plugin for Claude Code and Claude Cowork. Enforces that an AI agent declares what it intends to do before doing it, and every action is checked against that declared intent.

How It Works

1. Before the agent acts: Intercepts prompts, captures a structured plan (from Claude's built-in plan mode or an LLM fallback call), and sends it to ArmorIQ IAP for a signed intent token.
2. On every tool call: Checks the tool against the approved plan, verifies the token hasn't expired, evaluates local policy rules (allow/deny by tool name, data classification like PCI/PII), and optionally verifies CSRG cryptographic proofs. Blocks execution if any check fails.
3. After tool execution: Sends audit logs to ArmorIQ IAP for compliance tracking.
4. Fail-closed: If planning fails, identity is missing, or the token is invalid — all tool calls are blocked by default.

Install

One-line install (recommended)

This adds the armoriq Claude Code marketplace and installs the armorclaude plugin. Dependencies are installed automatically on first hook fire.

Manual install (Claude Code marketplace)

Verify

First-run behavior

The plugin ships its Node dependencies uninstalled. On the first launch (first hook fire or
first MCP-server start), scripts/bootstrap.mjs performs a one-time npm install and prints
to stderr:

- Requires Node.js >= 20 and npm on PATH, plus network access on that first run.
- The bundled MCP server (armorclaude-policy) registers once dependencies finish installing;
  it stays connected on subsequent runs without reinstalling.
- No API key is needed to start. With api_key blank the plugin runs in local-only mode
  (no data leaves your machine — see Data & Privacy); a key only adds backend
  audit, intent tokens, and CSRG…