Skip to content

v1.0.0

Choose a tag to compare

View all tags
@maxmalkin maxmalkin released this 26 Feb 22:44
· 111 commits to main since this release
v1.0.0
6fd14d7
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

AgentAuth v1.0.0

Initial release of AgentAuth - a capability-based authentication system for AI agents.

Features

  • Core Library - Protocol types, Ed25519 cryptography, capability schemas
  • Registry Service - Token issuance, grant management, agent registration
  • Verifier Service - High-performance token verification with Redis caching
  • Approval UI - React frontend for human capability approvals with WebAuthn
  • Rust SDK - Full-featured client with DPoP, rate limiting, token caching
  • Python Bindings - PyO3 bindings with LangChain and AutoGen integrations

Security

  • HSM key storage (AWS KMS, GCP Cloud KMS, Vault Transit)
  • DPoP sender-constraint for token binding
  • Nonce-based replay prevention
  • Immutable audit log with hash chain integrity
  • Constant-time cryptographic comparisons

Performance

  • Sub-5ms p99 token verification (Redis warm)
  • 10,000 verifications/second throughput target

Documentation

  • Threat model covering 13 attack vectors
  • Operations runbook for all alerts
  • Capacity planning guide
Assets 2
Loading