AgentSign – Zero trust for AI agents (OWASP-aligned)
Cryptographic agent passports when AI agent security is becoming a crowded category.
Zero trust security for AI agents fills the MCP identity gap before competitors do.
AI developers and security engineers
Sigstore · SPIFFE
We built AgentSign -- a zero trust engine for AI agents. The problem: agents are operating without any identity infrastructure. Moltbook went viral for fake posts because there was zero verification on who or what was posting.
AgentSign gives every agent a cryptographic identity certificate, signs every action into an execution chain, and runs runtime code attestation before anything executes. There's also an MCP Trust Layer for agent-to-MCP server verification, and a Stripe-powered Trust Gate for agent payments.
5 subsystems: identity certs, execution chain verification, runtime code attestation, output tamper detection, and cryptographic trust scoring.
Free and open source. Built in London.
SDK: https://github.com/razashariff/agentsign-sdk
Happy to answer questions.
Cryptographic agent passports when AI agent security is becoming a crowded category.
TLS for MCP agents with ECDSA passports and L0-L4 trust levels, zero dependencies.
Delegation chains with accumulating caveats narrow authority at each agent hop.
Cryptographic proof enforces agent permissions, not just Langfuse-style observability.
The SDK exposes the exact primitives you want for autonomous-agent commerce: register/resolve identity, attest and badge verification, create/fund/cancel escrows, release/slash settlements, and reputation queries — plus event hooks. It's a smart, timely idea to stitch payments and trust into agent URIs, but the repo still reads like an early SDK: docs and integration examples are thin and there's no clear public security/settlement audit or adoption evidence yet.
Ambitious Rust microkernel OS, but seL4 and Redox already own the verification-ready space.