v0.1.0
First tagged release.
What's in it
- Signed, gap-free receipts. Every authenticated action attempt commits one
hash-chained, Ed25519-signed receipt before the HTTP response. - Offline verification.
agentgate-verifychecks a SQLite or JSONL receipt
chain against a pinned trust file with no network call and no shared secret. - Signed bounded export.
GET /v1/receipts/exportreturns a snapshot-consistent
JSONL range whose manifest embeds its own trust keys. - Attenuated Biscuit delegation. Presented delegation tokens are verified and
bound to the specific agent/principal/service/action/expiry before any registry,
vault, or upstream access; ordered attenuation commitments land in the receipt. - Connectors: GitHub, Slack, Stripe, Google Workspace (Gmail labels).
- Admin dashboard. Static single-page ledger view served same-origin at
/dashboard/. - 5-minute quickstart and a documented, sourced comparison against Nango,
Composio, Astrix, and Oasis (docs/comparison.md). - Contribution path:
CONTRIBUTING.mdplus startergood first issuetasks.
Verify it yourself
docker compose exec agentgate sh -c 'wget -qO- http://localhost:8080/v1/receipts/pubkey > /tmp/trust.json && agentgate-verify --source sqlite --path /data/agentgate.db --trust-root /tmp/trust.json'