Vela
Get the model
Built on Vela 2.0 · vLLM Semantic Router

The guard between
your agent and your keys

Vela reads every prompt, tool output and tool call your agent touches, and stops leaked secrets, hidden injections and risky transfers before they execute.

Download weights Try the demo
or pull the base model
$ huggingface-cli download vllm-sr/Vela-2.0-0.8B

Built for agents that touch wallets and APIs

MCP serversCoding agentsTrading botsWallet copilots Browser agentsx402 paymentsEmail agentsOnchain executors MCP serversCoding agentsTrading botsWallet copilots Browser agentsx402 paymentsEmail agentsOnchain executors

Three guards. One small model.

Each guard is a question asked of the same Vela backbone, so one forward pass covers all three.

secrets · span

Secret leaks

Finds the exact span of private keys, seed phrases, API keys, JWTs and wallet addresses in prompts, logs, configs and tool output.

injection · tools

Hidden injections

Flags instructions planted in web pages, token metadata, tx memos and emails before your agent reads them as orders.

toolcall · choice

Risky tool calls

Scores each call allow, confirm or block: wrong recipient, address poisoning, unlimited approvals, key export.

See it decide

Pick an input your agent might see. Vela labels it before the agent acts.

agent input

          

          

            
vela verdict

            

            
    
          
    
        
    
      
    
    
    

    
    
    
      
    Agent alone vs. agent with Vela
    
      
    
        
    
          
          
          
        
    
        
      
          
    • Seed phrase pasted into a support chat
      • 
          
    • "Ignore previous instructions" in token metadata
      • 
          
    • approve(spender, 2²⁵⁶−1)
      • 
          
    • Transfer to a look-alike address
      • 
          
    • Swap the user actually asked for
      • 
        
    
      
    
    
    

    
    
    
      
    How it works
    
      
      
        
    1. 1
      Wrap your agent
      Route prompts, tool outputs and pending tool calls through Vela.
      2. 
        
    2. 2
      Ask three questions
      Secret spans, injection yes/no, and allow / confirm / block, from one backbone.
      3. 
        
    3. 3
      Act on the verdict
      Redact, quarantine, or ask the user before anything is signed.
      4. 
      
    
    
    

    
    
    
      
    
        
    0guards in a single forward pass
    
        
    0secret types tagged at span level
    
        
    0.3–9Bbackbone sizes, from edge to server
    
      
    
      
    No cloud call required. Run it next to your agent and keep keys on your own hardware.
    
    
    

    
    
    
      
    Pick a size
    
      
    Same guard heads on every Vela 2.0 backbone.
    
      
    
        
    Vela 0.3B
    Browser and edge
    Hugging Face
    
        
    Vela 0.8B
    Laptop, CPU-friendly
    Hugging Face
    
        
    Vela 4B
    Single consumer GPU
    Hugging Face
    
        
    Vela 9B
    Server, 48 GB GPU
    Hugging Face
    
      
    
    
    

    
    
    
      
      
    Let your agent act.
    Not leak.
    
      Get Vela
      
    Open weights · Apache-2.0