agent-identity-bridge 0.3.0__tar.gz
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- agent_identity_bridge-0.3.0/LICENSE +99 -0
- agent_identity_bridge-0.3.0/PKG-INFO +150 -0
- agent_identity_bridge-0.3.0/README.md +110 -0
- agent_identity_bridge-0.3.0/agent_identity_bridge.egg-info/PKG-INFO +150 -0
- agent_identity_bridge-0.3.0/agent_identity_bridge.egg-info/SOURCES.txt +22 -0
- agent_identity_bridge-0.3.0/agent_identity_bridge.egg-info/dependency_links.txt +1 -0
- agent_identity_bridge-0.3.0/agent_identity_bridge.egg-info/entry_points.txt +2 -0
- agent_identity_bridge-0.3.0/agent_identity_bridge.egg-info/requires.txt +18 -0
- agent_identity_bridge-0.3.0/agent_identity_bridge.egg-info/top_level.txt +1 -0
- agent_identity_bridge-0.3.0/aib/__init__.py +2 -0
- agent_identity_bridge-0.3.0/aib/audit.py +157 -0
- agent_identity_bridge-0.3.0/aib/cli.py +417 -0
- agent_identity_bridge-0.3.0/aib/crypto.py +271 -0
- agent_identity_bridge-0.3.0/aib/gateway.py +167 -0
- agent_identity_bridge-0.3.0/aib/main.py +390 -0
- agent_identity_bridge-0.3.0/aib/passport.py +314 -0
- agent_identity_bridge-0.3.0/aib/schemas.py +132 -0
- agent_identity_bridge-0.3.0/aib/security.py +328 -0
- agent_identity_bridge-0.3.0/aib/translator.py +361 -0
- agent_identity_bridge-0.3.0/pyproject.toml +64 -0
- agent_identity_bridge-0.3.0/setup.cfg +4 -0
- agent_identity_bridge-0.3.0/tests/test_cli.py +111 -0
- agent_identity_bridge-0.3.0/tests/test_core.py +291 -0
- agent_identity_bridge-0.3.0/tests/test_security.py +320 -0
|
@@ -0,0 +1,99 @@
|
|
|
1
|
+
Apache License
|
|
2
|
+
Version 2.0, January 2004
|
|
3
|
+
http://www.apache.org/licenses/
|
|
4
|
+
|
|
5
|
+
TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
|
|
6
|
+
|
|
7
|
+
1. Definitions.
|
|
8
|
+
|
|
9
|
+
"License" shall mean the terms and conditions for use, reproduction,
|
|
10
|
+
and distribution as defined by Sections 1 through 9 of this document.
|
|
11
|
+
|
|
12
|
+
"Licensor" shall mean the copyright owner or entity authorized by
|
|
13
|
+
the copyright owner that is granting the License.
|
|
14
|
+
|
|
15
|
+
"Legal Entity" shall mean the union of the acting entity and all
|
|
16
|
+
other entities that control, are controlled by, or are under common
|
|
17
|
+
control with that entity.
|
|
18
|
+
|
|
19
|
+
"You" (or "Your") shall mean an individual or Legal Entity
|
|
20
|
+
exercising permissions granted by this License.
|
|
21
|
+
|
|
22
|
+
"Source" form shall mean the preferred form for making modifications.
|
|
23
|
+
|
|
24
|
+
"Object" form shall mean any form resulting from mechanical
|
|
25
|
+
transformation or translation of a Source form.
|
|
26
|
+
|
|
27
|
+
"Work" shall mean the work of authorship made available under the License.
|
|
28
|
+
|
|
29
|
+
"Contribution" shall mean any work of authorship submitted to the Licensor
|
|
30
|
+
for inclusion in the Work.
|
|
31
|
+
|
|
32
|
+
"Contributor" shall mean Licensor and any Legal Entity on behalf of whom
|
|
33
|
+
a Contribution has been received by the Licensor.
|
|
34
|
+
|
|
35
|
+
2. Grant of Copyright License. Subject to the terms and conditions of
|
|
36
|
+
this License, each Contributor hereby grants to You a perpetual,
|
|
37
|
+
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
|
|
38
|
+
copyright license to reproduce, prepare Derivative Works of,
|
|
39
|
+
publicly display, publicly perform, sublicense, and distribute the
|
|
40
|
+
Work and such Derivative Works in Source or Object form.
|
|
41
|
+
|
|
42
|
+
3. Grant of Patent License. Subject to the terms and conditions of
|
|
43
|
+
this License, each Contributor hereby grants to You a perpetual,
|
|
44
|
+
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
|
|
45
|
+
patent license to make, have made, use, offer to sell, sell,
|
|
46
|
+
import, and otherwise transfer the Work.
|
|
47
|
+
|
|
48
|
+
4. Redistribution. You may reproduce and distribute copies of the
|
|
49
|
+
Work or Derivative Works thereof in any medium, with or without
|
|
50
|
+
modifications, and in Source or Object form, provided that You
|
|
51
|
+
meet the following conditions:
|
|
52
|
+
|
|
53
|
+
(a) You must give any other recipients of the Work or
|
|
54
|
+
Derivative Works a copy of this License; and
|
|
55
|
+
|
|
56
|
+
(b) You must cause any modified files to carry prominent notices
|
|
57
|
+
stating that You changed the files; and
|
|
58
|
+
|
|
59
|
+
(c) You must retain, in the Source form of any Derivative Works
|
|
60
|
+
that You distribute, all copyright, patent, trademark, and
|
|
61
|
+
attribution notices from the Source form of the Work; and
|
|
62
|
+
|
|
63
|
+
(d) If the Work includes a "NOTICE" text file, You must include
|
|
64
|
+
a readable copy of the attribution notices contained within
|
|
65
|
+
such NOTICE file.
|
|
66
|
+
|
|
67
|
+
5. Submission of Contributions. Unless You explicitly state otherwise,
|
|
68
|
+
any Contribution intentionally submitted for inclusion in the Work
|
|
69
|
+
by You to the Licensor shall be under the terms and conditions of
|
|
70
|
+
this License, without any additional terms or conditions.
|
|
71
|
+
|
|
72
|
+
6. Trademarks. This License does not grant permission to use the trade
|
|
73
|
+
names, trademarks, service marks, or product names of the Licensor.
|
|
74
|
+
|
|
75
|
+
7. Disclaimer of Warranty. The Work is provided on an "AS IS" BASIS,
|
|
76
|
+
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND.
|
|
77
|
+
|
|
78
|
+
8. Limitation of Liability. In no event shall any Contributor be liable
|
|
79
|
+
to You for damages, including any direct, indirect, special, incidental,
|
|
80
|
+
or consequential damages of any character arising as a result of this
|
|
81
|
+
License or out of the use or inability to use the Work.
|
|
82
|
+
|
|
83
|
+
9. Accepting Warranty or Additional Liability. You may choose to offer,
|
|
84
|
+
and charge a fee for, acceptance of support, warranty, indemnity,
|
|
85
|
+
or other liability obligations consistent with this License.
|
|
86
|
+
|
|
87
|
+
Copyright 2026 TNTECH CONSULTING SAS
|
|
88
|
+
|
|
89
|
+
Licensed under the Apache License, Version 2.0 (the "License");
|
|
90
|
+
you may not use this file except in compliance with the License.
|
|
91
|
+
You may obtain a copy of the License at
|
|
92
|
+
|
|
93
|
+
http://www.apache.org/licenses/LICENSE-2.0
|
|
94
|
+
|
|
95
|
+
Unless required by applicable law or agreed to in writing, software
|
|
96
|
+
distributed under the License is distributed on an "AS IS" BASIS,
|
|
97
|
+
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
98
|
+
See the License for the specific language governing permissions and
|
|
99
|
+
limitations under the License.
|
|
@@ -0,0 +1,150 @@
|
|
|
1
|
+
Metadata-Version: 2.4
|
|
2
|
+
Name: agent-identity-bridge
|
|
3
|
+
Version: 0.3.0
|
|
4
|
+
Summary: Portable identity for AI agents across MCP, A2A, ANP, and AG-UI protocols
|
|
5
|
+
Author-email: Thomas Nirennold <thomas.nirennold@live.fr>
|
|
6
|
+
License: Apache-2.0
|
|
7
|
+
Project-URL: Homepage, https://aib-cloud.netlify.app
|
|
8
|
+
Project-URL: Repository, https://github.com/tntech-consulting/agent-identity-bridge
|
|
9
|
+
Project-URL: Documentation, https://github.com/tntech-consulting/agent-identity-bridge#readme
|
|
10
|
+
Project-URL: Bug Tracker, https://github.com/tntech-consulting/agent-identity-bridge/issues
|
|
11
|
+
Keywords: ai,agents,identity,mcp,a2a,anp,protocol,bridge,security,gateway
|
|
12
|
+
Classifier: Development Status :: 3 - Alpha
|
|
13
|
+
Classifier: Intended Audience :: Developers
|
|
14
|
+
Classifier: License :: OSI Approved :: Apache Software License
|
|
15
|
+
Classifier: Programming Language :: Python :: 3.11
|
|
16
|
+
Classifier: Programming Language :: Python :: 3.12
|
|
17
|
+
Classifier: Programming Language :: Python :: 3.13
|
|
18
|
+
Classifier: Topic :: Software Development :: Libraries
|
|
19
|
+
Classifier: Topic :: Security
|
|
20
|
+
Classifier: Topic :: System :: Networking
|
|
21
|
+
Requires-Python: >=3.11
|
|
22
|
+
Description-Content-Type: text/markdown
|
|
23
|
+
License-File: LICENSE
|
|
24
|
+
Requires-Dist: fastapi>=0.110.0
|
|
25
|
+
Requires-Dist: uvicorn[standard]>=0.27.0
|
|
26
|
+
Requires-Dist: httpx>=0.27.0
|
|
27
|
+
Requires-Dist: pydantic>=2.6.0
|
|
28
|
+
Requires-Dist: cryptography>=42.0
|
|
29
|
+
Requires-Dist: PyJWT>=2.8
|
|
30
|
+
Provides-Extra: telemetry
|
|
31
|
+
Requires-Dist: opentelemetry-sdk>=1.22; extra == "telemetry"
|
|
32
|
+
Requires-Dist: opentelemetry-exporter-otlp>=1.22; extra == "telemetry"
|
|
33
|
+
Provides-Extra: dev
|
|
34
|
+
Requires-Dist: pytest>=8.0; extra == "dev"
|
|
35
|
+
Requires-Dist: pytest-asyncio>=0.23; extra == "dev"
|
|
36
|
+
Requires-Dist: ruff>=0.3.0; extra == "dev"
|
|
37
|
+
Provides-Extra: all
|
|
38
|
+
Requires-Dist: agent-identity-bridge[dev,telemetry]; extra == "all"
|
|
39
|
+
Dynamic: license-file
|
|
40
|
+
|
|
41
|
+
# Agent Identity Bridge (AIB)
|
|
42
|
+
|
|
43
|
+
**One identity. Every protocol. Full audit trail.**
|
|
44
|
+
|
|
45
|
+
AIB is an open-source protocol and reference implementation that gives AI agents a single portable identity across MCP (Anthropic), A2A (Google), ANP (W3C DID), and AG-UI — the four layers of the 2026 AI communication stack.
|
|
46
|
+
|
|
47
|
+
## The problem
|
|
48
|
+
|
|
49
|
+
Each AI protocol has its own identity system. An agent operating across MCP + A2A + ANP has three separate identities with no link between them. This makes cross-protocol auditing impossible, credential management painful, and compliance (GDPR, SOC2) a nightmare.
|
|
50
|
+
|
|
51
|
+
## What AIB does
|
|
52
|
+
|
|
53
|
+
| Component | Purpose |
|
|
54
|
+
|-----------|---------|
|
|
55
|
+
| **Agent Passport** | A signed JSON document (JWS) that binds one agent identity to credentials for every protocol it supports |
|
|
56
|
+
| **Credential Translator** | Converts between A2A Agent Cards ↔ MCP Server Cards ↔ DID Documents automatically |
|
|
57
|
+
| **Audit Trail** | Unified OpenTelemetry traces for every cross-protocol interaction |
|
|
58
|
+
| **Gateway Proxy** | Reverse proxy that injects the right credentials based on target protocol |
|
|
59
|
+
|
|
60
|
+
## Quick start
|
|
61
|
+
|
|
62
|
+
```bash
|
|
63
|
+
# Clone and install
|
|
64
|
+
git clone https://github.com/tntech-consulting/agent-identity-bridge.git
|
|
65
|
+
cd agent-identity-bridge
|
|
66
|
+
pip install -e .
|
|
67
|
+
|
|
68
|
+
# Create your first Agent Passport
|
|
69
|
+
python -m aib.passport
|
|
70
|
+
|
|
71
|
+
# Translate between protocol formats
|
|
72
|
+
python -m aib.translator
|
|
73
|
+
```
|
|
74
|
+
|
|
75
|
+
## Agent Passport format
|
|
76
|
+
|
|
77
|
+
```json
|
|
78
|
+
{
|
|
79
|
+
"aib_version": "0.1",
|
|
80
|
+
"passport_id": "urn:aib:agent:myorg:my-agent",
|
|
81
|
+
"display_name": "My Agent",
|
|
82
|
+
"issuer": "urn:aib:org:myorg",
|
|
83
|
+
"capabilities": ["search", "booking"],
|
|
84
|
+
"protocol_bindings": {
|
|
85
|
+
"mcp": { "server_card_url": "https://...", "auth_method": "oauth2" },
|
|
86
|
+
"a2a": { "agent_card_url": "https://...", "auth_method": "bearer" },
|
|
87
|
+
"anp": { "did": "did:web:example.com:agents:my-agent", "auth_method": "did-auth" }
|
|
88
|
+
}
|
|
89
|
+
}
|
|
90
|
+
```
|
|
91
|
+
|
|
92
|
+
## Architecture
|
|
93
|
+
|
|
94
|
+
```
|
|
95
|
+
┌─────────────┐ ┌─────────────────┐ ┌──────────────┐
|
|
96
|
+
│ Your Agent │────▶│ AIB Gateway │────▶│ MCP Server │
|
|
97
|
+
│ │ │ │────▶│ A2A Agent │
|
|
98
|
+
│ 1 passport │ │ Translates IDs │────▶│ ANP Peer │
|
|
99
|
+
│ │ │ Logs everything │ │ │
|
|
100
|
+
└─────────────┘ └─────────────────┘ └──────────────┘
|
|
101
|
+
```
|
|
102
|
+
|
|
103
|
+
## Project structure
|
|
104
|
+
|
|
105
|
+
```
|
|
106
|
+
aib/
|
|
107
|
+
├── passport.py # Agent Passport CRUD + signing
|
|
108
|
+
├── translator.py # Agent Card ↔ Server Card ↔ DID
|
|
109
|
+
├── credential_store.py # Encrypted credential vault (coming)
|
|
110
|
+
├── gateway.py # Protocol-aware reverse proxy (coming)
|
|
111
|
+
├── audit.py # OpenTelemetry trace emitter (coming)
|
|
112
|
+
└── schemas.py # Pydantic models (coming)
|
|
113
|
+
spec/
|
|
114
|
+
└── passport-schema-v0.1.json # JSON Schema
|
|
115
|
+
```
|
|
116
|
+
|
|
117
|
+
## Roadmap
|
|
118
|
+
|
|
119
|
+
- [x] Spec v0.1 — Agent Passport JSON Schema
|
|
120
|
+
- [x] passport.py — Create, sign, verify, revoke passports
|
|
121
|
+
- [x] translator.py — A2A ↔ MCP ↔ DID translation
|
|
122
|
+
- [ ] FastAPI gateway with credential injection
|
|
123
|
+
- [ ] OpenTelemetry audit trail
|
|
124
|
+
- [ ] Docker packaging
|
|
125
|
+
- [ ] CLI tool (`aib create`, `aib translate`, `aib verify`)
|
|
126
|
+
- [ ] Managed SaaS version
|
|
127
|
+
|
|
128
|
+
## How AIB relates to existing protocols
|
|
129
|
+
|
|
130
|
+
AIB doesn't compete with MCP, A2A, or ANP — it bridges them.
|
|
131
|
+
|
|
132
|
+
- **MCP** connects agents to tools. AIB connects agents to *all protocols*.
|
|
133
|
+
- **A2A** coordinates agents. AIB gives each agent an identity usable in A2A *and* MCP *and* ANP.
|
|
134
|
+
- **ANP** provides decentralized identity (DID). AIB uses DID as one of its supported formats, not the only one.
|
|
135
|
+
|
|
136
|
+
## Contributing
|
|
137
|
+
|
|
138
|
+
This project is Apache 2.0 licensed. Contributions welcome — especially around:
|
|
139
|
+
- Additional protocol bindings (AG-UI, LMOS, AP2)
|
|
140
|
+
- Security hardening (RS256 signatures, key rotation)
|
|
141
|
+
- Enterprise features (SAML, SIEM export)
|
|
142
|
+
|
|
143
|
+
## Author
|
|
144
|
+
|
|
145
|
+
**Thomas Nirennold** — TNTECH CONSULTING SAS (SIREN 993811157)
|
|
146
|
+
Building the identity layer the AI agent ecosystem is missing.
|
|
147
|
+
|
|
148
|
+
## License
|
|
149
|
+
|
|
150
|
+
Apache 2.0 — see [LICENSE](LICENSE)
|
|
@@ -0,0 +1,110 @@
|
|
|
1
|
+
# Agent Identity Bridge (AIB)
|
|
2
|
+
|
|
3
|
+
**One identity. Every protocol. Full audit trail.**
|
|
4
|
+
|
|
5
|
+
AIB is an open-source protocol and reference implementation that gives AI agents a single portable identity across MCP (Anthropic), A2A (Google), ANP (W3C DID), and AG-UI — the four layers of the 2026 AI communication stack.
|
|
6
|
+
|
|
7
|
+
## The problem
|
|
8
|
+
|
|
9
|
+
Each AI protocol has its own identity system. An agent operating across MCP + A2A + ANP has three separate identities with no link between them. This makes cross-protocol auditing impossible, credential management painful, and compliance (GDPR, SOC2) a nightmare.
|
|
10
|
+
|
|
11
|
+
## What AIB does
|
|
12
|
+
|
|
13
|
+
| Component | Purpose |
|
|
14
|
+
|-----------|---------|
|
|
15
|
+
| **Agent Passport** | A signed JSON document (JWS) that binds one agent identity to credentials for every protocol it supports |
|
|
16
|
+
| **Credential Translator** | Converts between A2A Agent Cards ↔ MCP Server Cards ↔ DID Documents automatically |
|
|
17
|
+
| **Audit Trail** | Unified OpenTelemetry traces for every cross-protocol interaction |
|
|
18
|
+
| **Gateway Proxy** | Reverse proxy that injects the right credentials based on target protocol |
|
|
19
|
+
|
|
20
|
+
## Quick start
|
|
21
|
+
|
|
22
|
+
```bash
|
|
23
|
+
# Clone and install
|
|
24
|
+
git clone https://github.com/tntech-consulting/agent-identity-bridge.git
|
|
25
|
+
cd agent-identity-bridge
|
|
26
|
+
pip install -e .
|
|
27
|
+
|
|
28
|
+
# Create your first Agent Passport
|
|
29
|
+
python -m aib.passport
|
|
30
|
+
|
|
31
|
+
# Translate between protocol formats
|
|
32
|
+
python -m aib.translator
|
|
33
|
+
```
|
|
34
|
+
|
|
35
|
+
## Agent Passport format
|
|
36
|
+
|
|
37
|
+
```json
|
|
38
|
+
{
|
|
39
|
+
"aib_version": "0.1",
|
|
40
|
+
"passport_id": "urn:aib:agent:myorg:my-agent",
|
|
41
|
+
"display_name": "My Agent",
|
|
42
|
+
"issuer": "urn:aib:org:myorg",
|
|
43
|
+
"capabilities": ["search", "booking"],
|
|
44
|
+
"protocol_bindings": {
|
|
45
|
+
"mcp": { "server_card_url": "https://...", "auth_method": "oauth2" },
|
|
46
|
+
"a2a": { "agent_card_url": "https://...", "auth_method": "bearer" },
|
|
47
|
+
"anp": { "did": "did:web:example.com:agents:my-agent", "auth_method": "did-auth" }
|
|
48
|
+
}
|
|
49
|
+
}
|
|
50
|
+
```
|
|
51
|
+
|
|
52
|
+
## Architecture
|
|
53
|
+
|
|
54
|
+
```
|
|
55
|
+
┌─────────────┐ ┌─────────────────┐ ┌──────────────┐
|
|
56
|
+
│ Your Agent │────▶│ AIB Gateway │────▶│ MCP Server │
|
|
57
|
+
│ │ │ │────▶│ A2A Agent │
|
|
58
|
+
│ 1 passport │ │ Translates IDs │────▶│ ANP Peer │
|
|
59
|
+
│ │ │ Logs everything │ │ │
|
|
60
|
+
└─────────────┘ └─────────────────┘ └──────────────┘
|
|
61
|
+
```
|
|
62
|
+
|
|
63
|
+
## Project structure
|
|
64
|
+
|
|
65
|
+
```
|
|
66
|
+
aib/
|
|
67
|
+
├── passport.py # Agent Passport CRUD + signing
|
|
68
|
+
├── translator.py # Agent Card ↔ Server Card ↔ DID
|
|
69
|
+
├── credential_store.py # Encrypted credential vault (coming)
|
|
70
|
+
├── gateway.py # Protocol-aware reverse proxy (coming)
|
|
71
|
+
├── audit.py # OpenTelemetry trace emitter (coming)
|
|
72
|
+
└── schemas.py # Pydantic models (coming)
|
|
73
|
+
spec/
|
|
74
|
+
└── passport-schema-v0.1.json # JSON Schema
|
|
75
|
+
```
|
|
76
|
+
|
|
77
|
+
## Roadmap
|
|
78
|
+
|
|
79
|
+
- [x] Spec v0.1 — Agent Passport JSON Schema
|
|
80
|
+
- [x] passport.py — Create, sign, verify, revoke passports
|
|
81
|
+
- [x] translator.py — A2A ↔ MCP ↔ DID translation
|
|
82
|
+
- [ ] FastAPI gateway with credential injection
|
|
83
|
+
- [ ] OpenTelemetry audit trail
|
|
84
|
+
- [ ] Docker packaging
|
|
85
|
+
- [ ] CLI tool (`aib create`, `aib translate`, `aib verify`)
|
|
86
|
+
- [ ] Managed SaaS version
|
|
87
|
+
|
|
88
|
+
## How AIB relates to existing protocols
|
|
89
|
+
|
|
90
|
+
AIB doesn't compete with MCP, A2A, or ANP — it bridges them.
|
|
91
|
+
|
|
92
|
+
- **MCP** connects agents to tools. AIB connects agents to *all protocols*.
|
|
93
|
+
- **A2A** coordinates agents. AIB gives each agent an identity usable in A2A *and* MCP *and* ANP.
|
|
94
|
+
- **ANP** provides decentralized identity (DID). AIB uses DID as one of its supported formats, not the only one.
|
|
95
|
+
|
|
96
|
+
## Contributing
|
|
97
|
+
|
|
98
|
+
This project is Apache 2.0 licensed. Contributions welcome — especially around:
|
|
99
|
+
- Additional protocol bindings (AG-UI, LMOS, AP2)
|
|
100
|
+
- Security hardening (RS256 signatures, key rotation)
|
|
101
|
+
- Enterprise features (SAML, SIEM export)
|
|
102
|
+
|
|
103
|
+
## Author
|
|
104
|
+
|
|
105
|
+
**Thomas Nirennold** — TNTECH CONSULTING SAS (SIREN 993811157)
|
|
106
|
+
Building the identity layer the AI agent ecosystem is missing.
|
|
107
|
+
|
|
108
|
+
## License
|
|
109
|
+
|
|
110
|
+
Apache 2.0 — see [LICENSE](LICENSE)
|
|
@@ -0,0 +1,150 @@
|
|
|
1
|
+
Metadata-Version: 2.4
|
|
2
|
+
Name: agent-identity-bridge
|
|
3
|
+
Version: 0.3.0
|
|
4
|
+
Summary: Portable identity for AI agents across MCP, A2A, ANP, and AG-UI protocols
|
|
5
|
+
Author-email: Thomas Nirennold <thomas.nirennold@live.fr>
|
|
6
|
+
License: Apache-2.0
|
|
7
|
+
Project-URL: Homepage, https://aib-cloud.netlify.app
|
|
8
|
+
Project-URL: Repository, https://github.com/tntech-consulting/agent-identity-bridge
|
|
9
|
+
Project-URL: Documentation, https://github.com/tntech-consulting/agent-identity-bridge#readme
|
|
10
|
+
Project-URL: Bug Tracker, https://github.com/tntech-consulting/agent-identity-bridge/issues
|
|
11
|
+
Keywords: ai,agents,identity,mcp,a2a,anp,protocol,bridge,security,gateway
|
|
12
|
+
Classifier: Development Status :: 3 - Alpha
|
|
13
|
+
Classifier: Intended Audience :: Developers
|
|
14
|
+
Classifier: License :: OSI Approved :: Apache Software License
|
|
15
|
+
Classifier: Programming Language :: Python :: 3.11
|
|
16
|
+
Classifier: Programming Language :: Python :: 3.12
|
|
17
|
+
Classifier: Programming Language :: Python :: 3.13
|
|
18
|
+
Classifier: Topic :: Software Development :: Libraries
|
|
19
|
+
Classifier: Topic :: Security
|
|
20
|
+
Classifier: Topic :: System :: Networking
|
|
21
|
+
Requires-Python: >=3.11
|
|
22
|
+
Description-Content-Type: text/markdown
|
|
23
|
+
License-File: LICENSE
|
|
24
|
+
Requires-Dist: fastapi>=0.110.0
|
|
25
|
+
Requires-Dist: uvicorn[standard]>=0.27.0
|
|
26
|
+
Requires-Dist: httpx>=0.27.0
|
|
27
|
+
Requires-Dist: pydantic>=2.6.0
|
|
28
|
+
Requires-Dist: cryptography>=42.0
|
|
29
|
+
Requires-Dist: PyJWT>=2.8
|
|
30
|
+
Provides-Extra: telemetry
|
|
31
|
+
Requires-Dist: opentelemetry-sdk>=1.22; extra == "telemetry"
|
|
32
|
+
Requires-Dist: opentelemetry-exporter-otlp>=1.22; extra == "telemetry"
|
|
33
|
+
Provides-Extra: dev
|
|
34
|
+
Requires-Dist: pytest>=8.0; extra == "dev"
|
|
35
|
+
Requires-Dist: pytest-asyncio>=0.23; extra == "dev"
|
|
36
|
+
Requires-Dist: ruff>=0.3.0; extra == "dev"
|
|
37
|
+
Provides-Extra: all
|
|
38
|
+
Requires-Dist: agent-identity-bridge[dev,telemetry]; extra == "all"
|
|
39
|
+
Dynamic: license-file
|
|
40
|
+
|
|
41
|
+
# Agent Identity Bridge (AIB)
|
|
42
|
+
|
|
43
|
+
**One identity. Every protocol. Full audit trail.**
|
|
44
|
+
|
|
45
|
+
AIB is an open-source protocol and reference implementation that gives AI agents a single portable identity across MCP (Anthropic), A2A (Google), ANP (W3C DID), and AG-UI — the four layers of the 2026 AI communication stack.
|
|
46
|
+
|
|
47
|
+
## The problem
|
|
48
|
+
|
|
49
|
+
Each AI protocol has its own identity system. An agent operating across MCP + A2A + ANP has three separate identities with no link between them. This makes cross-protocol auditing impossible, credential management painful, and compliance (GDPR, SOC2) a nightmare.
|
|
50
|
+
|
|
51
|
+
## What AIB does
|
|
52
|
+
|
|
53
|
+
| Component | Purpose |
|
|
54
|
+
|-----------|---------|
|
|
55
|
+
| **Agent Passport** | A signed JSON document (JWS) that binds one agent identity to credentials for every protocol it supports |
|
|
56
|
+
| **Credential Translator** | Converts between A2A Agent Cards ↔ MCP Server Cards ↔ DID Documents automatically |
|
|
57
|
+
| **Audit Trail** | Unified OpenTelemetry traces for every cross-protocol interaction |
|
|
58
|
+
| **Gateway Proxy** | Reverse proxy that injects the right credentials based on target protocol |
|
|
59
|
+
|
|
60
|
+
## Quick start
|
|
61
|
+
|
|
62
|
+
```bash
|
|
63
|
+
# Clone and install
|
|
64
|
+
git clone https://github.com/tntech-consulting/agent-identity-bridge.git
|
|
65
|
+
cd agent-identity-bridge
|
|
66
|
+
pip install -e .
|
|
67
|
+
|
|
68
|
+
# Create your first Agent Passport
|
|
69
|
+
python -m aib.passport
|
|
70
|
+
|
|
71
|
+
# Translate between protocol formats
|
|
72
|
+
python -m aib.translator
|
|
73
|
+
```
|
|
74
|
+
|
|
75
|
+
## Agent Passport format
|
|
76
|
+
|
|
77
|
+
```json
|
|
78
|
+
{
|
|
79
|
+
"aib_version": "0.1",
|
|
80
|
+
"passport_id": "urn:aib:agent:myorg:my-agent",
|
|
81
|
+
"display_name": "My Agent",
|
|
82
|
+
"issuer": "urn:aib:org:myorg",
|
|
83
|
+
"capabilities": ["search", "booking"],
|
|
84
|
+
"protocol_bindings": {
|
|
85
|
+
"mcp": { "server_card_url": "https://...", "auth_method": "oauth2" },
|
|
86
|
+
"a2a": { "agent_card_url": "https://...", "auth_method": "bearer" },
|
|
87
|
+
"anp": { "did": "did:web:example.com:agents:my-agent", "auth_method": "did-auth" }
|
|
88
|
+
}
|
|
89
|
+
}
|
|
90
|
+
```
|
|
91
|
+
|
|
92
|
+
## Architecture
|
|
93
|
+
|
|
94
|
+
```
|
|
95
|
+
┌─────────────┐ ┌─────────────────┐ ┌──────────────┐
|
|
96
|
+
│ Your Agent │────▶│ AIB Gateway │────▶│ MCP Server │
|
|
97
|
+
│ │ │ │────▶│ A2A Agent │
|
|
98
|
+
│ 1 passport │ │ Translates IDs │────▶│ ANP Peer │
|
|
99
|
+
│ │ │ Logs everything │ │ │
|
|
100
|
+
└─────────────┘ └─────────────────┘ └──────────────┘
|
|
101
|
+
```
|
|
102
|
+
|
|
103
|
+
## Project structure
|
|
104
|
+
|
|
105
|
+
```
|
|
106
|
+
aib/
|
|
107
|
+
├── passport.py # Agent Passport CRUD + signing
|
|
108
|
+
├── translator.py # Agent Card ↔ Server Card ↔ DID
|
|
109
|
+
├── credential_store.py # Encrypted credential vault (coming)
|
|
110
|
+
├── gateway.py # Protocol-aware reverse proxy (coming)
|
|
111
|
+
├── audit.py # OpenTelemetry trace emitter (coming)
|
|
112
|
+
└── schemas.py # Pydantic models (coming)
|
|
113
|
+
spec/
|
|
114
|
+
└── passport-schema-v0.1.json # JSON Schema
|
|
115
|
+
```
|
|
116
|
+
|
|
117
|
+
## Roadmap
|
|
118
|
+
|
|
119
|
+
- [x] Spec v0.1 — Agent Passport JSON Schema
|
|
120
|
+
- [x] passport.py — Create, sign, verify, revoke passports
|
|
121
|
+
- [x] translator.py — A2A ↔ MCP ↔ DID translation
|
|
122
|
+
- [ ] FastAPI gateway with credential injection
|
|
123
|
+
- [ ] OpenTelemetry audit trail
|
|
124
|
+
- [ ] Docker packaging
|
|
125
|
+
- [ ] CLI tool (`aib create`, `aib translate`, `aib verify`)
|
|
126
|
+
- [ ] Managed SaaS version
|
|
127
|
+
|
|
128
|
+
## How AIB relates to existing protocols
|
|
129
|
+
|
|
130
|
+
AIB doesn't compete with MCP, A2A, or ANP — it bridges them.
|
|
131
|
+
|
|
132
|
+
- **MCP** connects agents to tools. AIB connects agents to *all protocols*.
|
|
133
|
+
- **A2A** coordinates agents. AIB gives each agent an identity usable in A2A *and* MCP *and* ANP.
|
|
134
|
+
- **ANP** provides decentralized identity (DID). AIB uses DID as one of its supported formats, not the only one.
|
|
135
|
+
|
|
136
|
+
## Contributing
|
|
137
|
+
|
|
138
|
+
This project is Apache 2.0 licensed. Contributions welcome — especially around:
|
|
139
|
+
- Additional protocol bindings (AG-UI, LMOS, AP2)
|
|
140
|
+
- Security hardening (RS256 signatures, key rotation)
|
|
141
|
+
- Enterprise features (SAML, SIEM export)
|
|
142
|
+
|
|
143
|
+
## Author
|
|
144
|
+
|
|
145
|
+
**Thomas Nirennold** — TNTECH CONSULTING SAS (SIREN 993811157)
|
|
146
|
+
Building the identity layer the AI agent ecosystem is missing.
|
|
147
|
+
|
|
148
|
+
## License
|
|
149
|
+
|
|
150
|
+
Apache 2.0 — see [LICENSE](LICENSE)
|
|
@@ -0,0 +1,22 @@
|
|
|
1
|
+
LICENSE
|
|
2
|
+
README.md
|
|
3
|
+
pyproject.toml
|
|
4
|
+
agent_identity_bridge.egg-info/PKG-INFO
|
|
5
|
+
agent_identity_bridge.egg-info/SOURCES.txt
|
|
6
|
+
agent_identity_bridge.egg-info/dependency_links.txt
|
|
7
|
+
agent_identity_bridge.egg-info/entry_points.txt
|
|
8
|
+
agent_identity_bridge.egg-info/requires.txt
|
|
9
|
+
agent_identity_bridge.egg-info/top_level.txt
|
|
10
|
+
aib/__init__.py
|
|
11
|
+
aib/audit.py
|
|
12
|
+
aib/cli.py
|
|
13
|
+
aib/crypto.py
|
|
14
|
+
aib/gateway.py
|
|
15
|
+
aib/main.py
|
|
16
|
+
aib/passport.py
|
|
17
|
+
aib/schemas.py
|
|
18
|
+
aib/security.py
|
|
19
|
+
aib/translator.py
|
|
20
|
+
tests/test_cli.py
|
|
21
|
+
tests/test_core.py
|
|
22
|
+
tests/test_security.py
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
|
|
@@ -0,0 +1,18 @@
|
|
|
1
|
+
fastapi>=0.110.0
|
|
2
|
+
uvicorn[standard]>=0.27.0
|
|
3
|
+
httpx>=0.27.0
|
|
4
|
+
pydantic>=2.6.0
|
|
5
|
+
cryptography>=42.0
|
|
6
|
+
PyJWT>=2.8
|
|
7
|
+
|
|
8
|
+
[all]
|
|
9
|
+
agent-identity-bridge[dev,telemetry]
|
|
10
|
+
|
|
11
|
+
[dev]
|
|
12
|
+
pytest>=8.0
|
|
13
|
+
pytest-asyncio>=0.23
|
|
14
|
+
ruff>=0.3.0
|
|
15
|
+
|
|
16
|
+
[telemetry]
|
|
17
|
+
opentelemetry-sdk>=1.22
|
|
18
|
+
opentelemetry-exporter-otlp>=1.22
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
aib
|