Agent Integration

ProtoWall works as a reverse proxy with zero code changes. But for an extra layer of security, you can add origin secret verification to your app. It's a one-line middleware check that rejects requests not coming through ProtoWall.

Instead of writing that middleware yourself, you can tell a coding agent to do it. We maintain an open-source integration guide that agents can read and follow. It covers 12+ frameworks, detects your stack automatically, and places the middleware in the right location.

Works with Claude Code, Cursor, GitHub Copilot, Windsurf, Cline, Aider, or any agent that can read a URL. Paste this into your agent prompt:

Read https://raw.githubusercontent.com/protowall/integrate/main/AGENTS.md and follow the instructions to integrate ProtoWall origin secret verification into this project.

The agent will read the guide, detect your framework, add the correct middleware, and set up the environment variable.

If you use Claude Code, you can install a reusable /integrate-protowall command. Run this from your project directory:

mkdir -p .claude/commands
curl -o .claude/commands/integrate-protowall.md \
  https://raw.githubusercontent.com/protowall/integrate/main/claude-code/integrate-protowall.md

Then just run:

/integrate-protowall

The command auto-detects your framework, fetches the latest integration guide, applies the middleware, and tells you what to do next.

Using something else? The guide includes a general pattern that works with any HTTP framework. The agent will adapt it to your stack.

The integration adds exactly two things:

1. A middleware function that checks the x-protowall-secret header against a PROTOWALL_SECRET environment variable. If they don't match, the request gets a 403.
2. A PROTOWALL_SECRET placeholder in your .env.example or equivalent template file.

No dependencies. No SDK. No config files. Just one middleware check and one env var.

1. Copy the origin secret from your ProtoWall project dashboard
2. Set it as the PROTOWALL_SECRET environment variable in your deployment
3. Test: direct requests to your prototype should return 403, requests through the ProtoWall proxy should work normally

The integration guide and Claude Code command are open source. Contributions for additional frameworks are welcome.