Skip to content

AmorceAATP/autogpt-amorce-plugin

Folders and files

NameName
Last commit message
Last commit date

Latest commit

Β 

History

4 Commits
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 

Repository files navigation

AutoGPT-Amorce Plugin

GitHub License AutoGPT

Add Amorce security to AutoGPT with zero configuration

Automatically adds Ed25519 signatures and human-in-the-loop approvals to AutoGPT.


πŸš€ Quick Start

Installation

# Install via AutoGPT plugin manager
autogpt plugins install amorce

# Or manually
cd plugins
git clone https://github.com/amorce/autogpt-amorce-plugin

Configuration

Add to your .env:

AMORCE_ENABLED=true
AMORCE_HITL_ENABLED=true  # Optional: enable human approvals

That's it! AutoGPT now has:

  • βœ… Ed25519 cryptographic signatures
  • βœ… Trust Directory registration
  • βœ… Human-in-the-loop approvals (optional)
  • βœ… A2A-compatible messages
  • βœ… Audit trail for all actions

πŸ›‘οΈ Features

Zero Configuration

Plugin automatically:

  • Generates Amorce identity
  • Registers with Trust Directory
  • Signs all AI actions
  • Provides HITL UI

Human-in-the-Loop Interface

Visual approval interface for sensitive operations:

β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”
β”‚ πŸ” AMORCE APPROVAL REQUIRED             β”‚
β”œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€
β”‚                                         β”‚
β”‚ Action: Execute Python Code            β”‚
β”‚ Agent: AutoGPT-abc123                   β”‚
β”‚                                         β”‚
β”‚ Code:                                   β”‚
β”‚   import os                             β”‚
β”‚   os.system('rm -rf temp/*')            β”‚
β”‚                                         β”‚
β”‚ Risk Level: HIGH                        β”‚
β”‚                                         β”‚
β”‚ [βœ“ Approve]  [βœ— Deny]  [β„Ή Details]     β”‚
β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜

Automatic Signing

All AutoGPT actions are signed:

  • Web searches
  • File operations
  • Code execution
  • API calls
  • Memory updates

Trust Directory Integration

AutoGPT instance registered as verified agent:

  • Public profile
  • Trust score
  • Action history
  • Reputation tracking

βš™οΈ Configuration Options

Environment Variables

# Core settings
AMORCE_ENABLED=true                    # Enable plugin
AMORCE_IDENTITY_FILE=autogpt.pem       # Custom identity file

# HITL settings
AMORCE_HITL_ENABLED=true               # Enable human approvals
AMORCE_HITL_ACTIONS=execute_code,delete_file,api_call

# Trust Directory
AMORCE_DIRECTORY_URL=https://directory.amorce.io
AMORCE_REGISTER_PUBLIC=true            # Public in directory

# A2A Protocol
AMORCE_A2A_COMPATIBLE=true             # Use A2A format

Plugin Configuration

In autogpt/plugins/amorce_config.yaml:

amorce:
  enabled: true
  
  hitl:
    enabled: true
    require_for:
      - execute_code
      - delete_file
      - make_api_call
      - modify_memory
    
  trust_directory:
    register: true
    public_profile: true
    
  security:
    sign_all_actions: true
    verify_responses: true

πŸ“– Usage Examples

Basic Usage

  1. Install plugin
  2. Enable in .env
  3. Run AutoGPT normally
python -m autogpt

# AutoGPT now runs with Amorce security
# All actions are signed
# HITL approvals show up in terminal/UI

Viewing Agent Identity

# Check agent ID
python -m autogpt_amorce info

# Output:
# Agent ID: agent_autogpt_abc123
# Public Key: -----BEGIN PUBLIC KEY-----...
# Trust Score: 4.5β˜…
# Registered: βœ“

Approval Workflow

When AutoGPT attempts sensitive action:

  1. Plugin intercepts action
  2. Shows approval UI
  3. Waits for human decision
  4. Signs approved action
  5. Continues execution

πŸ”§ Advanced Features

Custom HITL Rules

# plugins/amorce/rules.py

from autogpt_amorce import HITLRule

# Require approval for high-value API calls
@HITLRule
def require_approval_for_expensive_apis(action):
    if action.type == 'api_call' and action.estimated_cost > 1.00:
        return True
    return False

# Require approval for internet access to sensitive domains
@HITLRule  
def require_approval_for_sensitive_domains(action):
    sensitive = ['api.stripe.com', 'api.github.com']
    if action.type == 'web_request' and any(d in action.url for d in sensitive):
        return True
    return False

Audit Trail

# View all signed actions
python -m autogpt_amorce audit

# Output:
# [2025-12-07 10:00:00] execute_code | Approved | Signature: ed25519:abc...
# [2025-12-07 10:01:30] web_search   | Auto     | Signature: ed25519:def...
# [2025-12-07 10:02:15] delete_file  | Denied   | N/A

πŸ§ͺ Testing

# Test plugin
cd autogpt-amorce-plugin
pytest tests/

# Test with AutoGPT
python -m autogpt --test-plugin amorce

πŸ“š Documentation


🀝 Contributing

Contributions welcome! See CONTRIBUTING.md


πŸ“„ License

MIT License - see LICENSE


πŸ”— Links


Built with ❀️ by the Amorce team

About

πŸ€– AutoGPT plugin for Amorce - Zero-config cryptographic security

Topics

Resources

Stars

Watchers

Forks

Packages

No packages published

Languages