Skip to content
Hyperledger Aries Cloud Agent Python (ACA-Py) is a foundation for building decentralized identity applications and services running in non-mobile environments.
Python Shell
Branch: master
Clone or download
andrewwhitehead Merge pull request #268 from sklump/unit-tests-aries-36-37-handlers
unit tests for present-proof and issue-cred protocol handlers, present-proof manager, ack message
Latest commit 77f47b7 Nov 15, 2019
Type Name Latest commit message Commit time
Failed to load latest commit information.
.circleci update docker image versions for consistency Sep 27, 2019
aries_cloudagent unit tests for present-proof and issue-cred protocol handlers, presen… Nov 15, 2019
bin fix -v option when no command is provided Aug 10, 2019
demo fix parameter names in demo and demo documentation Nov 12, 2019
docker update docker image versions for consistency Sep 27, 2019
docs add documentation on the administration API and webhooks Oct 11, 2019
scripts Update scripts to run correctly in Windows (using Git bash). Oct 9, 2019
.codecov.yml Adding codecov config yaml Feb 28, 2019
.coveragerc move test reports Jul 1, 2019
.dockerignore reduce size of docker context Aug 10, 2019
.gitattributes Update scripts to run correctly in Windows (using Git bash). Oct 9, 2019
.gitignore Merge from Postgres and Agent Demo branches May 29, 2019
.tgitconfig Merge from Postgres and Agent Demo branches May 29, 2019 add documentation on the administration API and webhooks Oct 11, 2019 update version to 0.3.5 Nov 1, 2019 Rename package to aries_cloudagent Jun 24, 2019 Add more information to Jul 16, 2019 Add intro to RTD site; add link to RTD site in README; cleanup Aug 28, 2019
LICENSE Adding Prov of BC, Gov of Canada copyright Jun 27, 2019 load default logging config as a package resource; add files to relea… Aug 9, 2019 add notes on updating Aug 9, 2019 add documentation on the administration API and webhooks Oct 11, 2019 Add default SECURITY policy Sep 27, 2019 Update the status of the use of the DID-Exchange protocol Oct 26, 2019 fix informational message when indy tests are skipped Jul 17, 2019 lock ptvsd version Oct 6, 2019
requirements.indy.txt update indy-sdk wrapper version Sep 27, 2019
requirements.txt Lock library versions Sep 17, 2019
setup.cfg add more intelligent test skipping; mock indy module when not availab… Jul 9, 2019 add optional support for uvloop Nov 6, 2019

Hyperledger Aries Cloud Agent - Python

pypi releases CircleCI codecov

An easy to use Aries agent for building SSI services using any language that supports sending/receiving HTTP requests.

Hyperledger Aries Cloud Agent Python (ACA-Py) is a foundation for building self-sovereign identity (SSI) / decentralized identity services running in non-mobile environments using DIDcomm messaging, the did:peer DID method, and verifiable credentials. With ACA-Py, SSI developers can focus on building services using familiar web development technologies instead of trying to learn the nuts and bolts of low-level SDKs.

As we create ACA-Py, we're also building resources so that developers with a wide-range of backgrounds can get productive with ACA-Py in a hurry. Checkout the resources section below and jump in.

The "cloud" in Aries Cloud Agent - Python does NOT mean that ACA-Py cannot be used as an edge agent. ACA-Py is suitable for use in any non-mobile agent scenario, including as an enterprise edge agent for issuing, verifying and holding verifiable credentials.

Table of Contents


Developing an ACA-Py-based application is pretty straight forward for those familiar with web development. An ACA-Py instance is always deployed with a paired "controller" application that provides the business logic for that ACA-Py agent. The controller receives webhook event notifications from its instance of ACA-Py and uses an HTTP API exposed by the ACA-Py instance to provide direction on how to respond to those events. No ACA-Py/Python development is needed--just deploy an ACA-Py instance from PyPi (examples available). The source of the business logic is your imagination. An interface to a legacy system? A user interface for a person? Custom code to implement a new service? You can build your controller in any language that supports making and receiving HTTP requests. Wait...that's every language!

ACA-Py currently supports "only" Hyperledger Indy's verifiable credentials scheme (which is pretty powerful). We are experimenting with adding support to ACA-Py for other DID Ledgers and verifiable credential schemes.

ACA-Py is built on the Aries concepts and features defined in the Aries RFC repository. This document contains a (reasonably up to date) list of supported Aries RFCs by the current ACA-Py implementation.


ACA-Py can be run with docker without installation, or can be installed from PyPi. Use the following command to install it locally:

pip install aries-cloudagent


Instructions for running ACA-Py can be found here.


The administrative API exposed by the agent for the controller to use must be protected with an API key (using the --admin-api-key command line arg) or deliberately left unsecured using the --admin-insecure-mode command line arg. The latter should not be used other than in development if the API is not otherwise secured.


A deployed instance of an ACA-Py agent assembles an OpenAPI-documented REST interface from the protocols loaded with the agent. This is used by a controller application (written in any language) to manage the behaviour of the agent. The controller can initiate agent actions such as issuing a credential, and can respond to agent events, such as sending a presentation request after a new pairwise DID Exchange connection has been accepted. Agent events are delivered to the controller as webhooks to a configured URL. More information on the administration API and webhooks can be found here.



If you are an experienced decentralized identity developer that knows Indy, are already familiar with the concepts behind Aries, want to play with the code, and perhaps even start contributing to the project, an "install and go" page for developers can be found here.

Architectural Deep Dive

The ACA-Py team presented an architectural deep dive webinar that can be viewed here. Slides from the webinar can be found here.

Getting Started Guide

For everyone those new to SSI, Indy and Aries, we've created a Getting Started Guide that will take you from knowing next to nothing about decentralized identity to developing Aries-based business apps and services in a hurry. Along the way, you'll run some early Indy apps, apps built on ACA-Py and developer-oriented demos for interacting with ACA-Py. The guide has a good table of contents so that you can skip the parts you already know.

Read the Docs

The ACA-Py Python docstrings are used as the source of a Read the Docs code overview site. Want to review the modules that make up ACA-Py? This is the best place to go.

What to Focus On?

Not sure where your focus should be? Building apps? Aries? Indy? Indy's Blockchain? Ursa? Here is a document that goes through the technical stack to show how the projects fit together, so you can decide where you want to focus your efforts.


The initial implementation of ACA-Py was developed by the Verifiable Organizations Network (VON) team based at the Province of British Columbia. To learn more about VON and what's happening with decentralized identity in British Columbia, please go to


Pull requests are welcome! Please read our contributions guide and submit your PRs. We enforce developer certificate of origin (DCO) commit signing. See guidance here.

We also welcome issues submitted about problems you encounter in using ACA-Py.


Apache License Version 2.0

You can’t perform that action at this time.