trustmodel-agentcert-tag 0.1.0__tar.gz

trustmodel_agentcert_tag-0.1.0/PKG-INFO

@@ -0,0 +1,49 @@
+Metadata-Version: 2.4
+Name: trustmodel-agentcert-tag
+Version: 0.1.0
+Summary: Verify an AgentCert + TrustScore inside a Python MCP server (shadow mode, opt-in, dependency-free).
+Author: TrustModel.ai
+License: MIT
+Project-URL: Homepage, https://trustmodel.ai/verify
+Project-URL: Documentation, https://trustmodel.ai/wiki/agentcert/verify-gateway
+Project-URL: Source, https://github.com/pdxlab/agentcert-tag
+Keywords: mcp,agentcert,trustscore,verification,ai-agents,trustmodel
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Intended Audience :: Developers
+Requires-Python: >=3.9
+Description-Content-Type: text/markdown
+
+# trustmodel-agentcert-tag
+
+Verify an **AgentCert + TrustScore** inside a Python MCP server. Thin, dependency-free
+client for a [TAG](https://trustmodel.ai/verify) verify endpoint — **off by default**,
+**shadow mode** when on (logs, never blocks), safe to merge.
+
+```bash
+pip install trustmodel-agentcert-tag
+```
+
+```python
+from trustmodel_agentcert_tag import verify_gate, extract_token
+
+guard = verify_gate(mode="shadow")            # shadow | enforce
+
+async def handle_tool_call(request):
+    token = extract_token(request.headers)    # X-AgentCert-Token (or mTLS-derived)
+    await guard(token)                        # logs (shadow) / raises VerifyError (enforce)
+    return await dispatch(request)
+```
+
+Enable per environment — nothing runs until you opt in:
+
+| Env var | Meaning |
+|---|---|
+| `TRUSTMODEL_VERIFY=1` | turn the gate on (otherwise `guard` is a no-op) |
+| `TRUSTMODEL_VERIFY_URL` | TAG verify endpoint (default `http://localhost:8080/verify`) |
+| `TRUSTMODEL_MODE=enforce` | switch to enforcement |
+
+The gate never reads request payloads (metadata only) and never makes the allow/deny
+decision on its own — it returns a structured verdict (`VERIFIED` / `REVOKED` /
+`UNVERIFIED` / `ERROR`) your server acts on. MIT licensed. Part of
+[pdxlab/agentcert-tag](https://github.com/pdxlab/agentcert-tag).

trustmodel_agentcert_tag-0.1.0/README.md

@@ -0,0 +1,33 @@
+# trustmodel-agentcert-tag
+
+Verify an **AgentCert + TrustScore** inside a Python MCP server. Thin, dependency-free
+client for a [TAG](https://trustmodel.ai/verify) verify endpoint — **off by default**,
+**shadow mode** when on (logs, never blocks), safe to merge.
+
+```bash
+pip install trustmodel-agentcert-tag
+```
+
+```python
+from trustmodel_agentcert_tag import verify_gate, extract_token
+
+guard = verify_gate(mode="shadow")            # shadow | enforce
+
+async def handle_tool_call(request):
+    token = extract_token(request.headers)    # X-AgentCert-Token (or mTLS-derived)
+    await guard(token)                        # logs (shadow) / raises VerifyError (enforce)
+    return await dispatch(request)
+```
+
+Enable per environment — nothing runs until you opt in:
+
+| Env var | Meaning |
+|---|---|
+| `TRUSTMODEL_VERIFY=1` | turn the gate on (otherwise `guard` is a no-op) |
+| `TRUSTMODEL_VERIFY_URL` | TAG verify endpoint (default `http://localhost:8080/verify`) |
+| `TRUSTMODEL_MODE=enforce` | switch to enforcement |
+
+The gate never reads request payloads (metadata only) and never makes the allow/deny
+decision on its own — it returns a structured verdict (`VERIFIED` / `REVOKED` /
+`UNVERIFIED` / `ERROR`) your server acts on. MIT licensed. Part of
+[pdxlab/agentcert-tag](https://github.com/pdxlab/agentcert-tag).

trustmodel_agentcert_tag-0.1.0/pyproject.toml

@@ -0,0 +1,27 @@
+[build-system]
+requires = ["setuptools>=68"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "trustmodel-agentcert-tag"
+version = "0.1.0"
+description = "Verify an AgentCert + TrustScore inside a Python MCP server (shadow mode, opt-in, dependency-free)."
+readme = "README.md"
+license = { text = "MIT" }
+requires-python = ">=3.9"
+authors = [{ name = "TrustModel.ai" }]
+keywords = ["mcp", "agentcert", "trustscore", "verification", "ai-agents", "trustmodel"]
+classifiers = [
+  "License :: OSI Approved :: MIT License",
+  "Programming Language :: Python :: 3",
+  "Intended Audience :: Developers",
+]
+dependencies = []
+
+[project.urls]
+Homepage = "https://trustmodel.ai/verify"
+Documentation = "https://trustmodel.ai/wiki/agentcert/verify-gateway"
+Source = "https://github.com/pdxlab/agentcert-tag"
+
+[tool.setuptools]
+packages = ["trustmodel_agentcert_tag"]

trustmodel_agentcert_tag-0.1.0/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

trustmodel_agentcert_tag-0.1.0/trustmodel_agentcert_tag/__init__.py

@@ -0,0 +1,133 @@
+"""trustmodel-agentcert-tag — verify an AgentCert + TrustScore inside a Python MCP server.
+
+The verification decision itself is made by a TAG verify endpoint (a local sidecar or a
+hosted endpoint); this package is a thin, dependency-free client + gate you drop in front
+of your tool calls. It is a no-op unless verification is turned on, and defaults to shadow
+mode (log, never block), so it is safe to merge.
+
+Typical use inside an MCP server's tool-call path:
+
+    from trustmodel_agentcert_tag import verify_gate, extract_token
+
+    guard = verify_gate(mode="shadow")           # shadow | enforce
+
+    async def handle_tool_call(request):
+        token = extract_token(request.headers)   # X-AgentCert-Token or mTLS-derived
+        await guard(token)                       # logs (shadow) / raises (enforce) on bad verdict
+        return await dispatch(request)
+
+Environment:
+    TRUSTMODEL_VERIFY=1            enable (otherwise verify_gate() is a no-op passthrough)
+    TRUSTMODEL_VERIFY_URL=...      TAG verify endpoint (default http://localhost:8080/verify)
+    TRUSTMODEL_MODE=enforce        override mode to enforce
+"""
+from __future__ import annotations
+
+import json
+import logging
+import os
+import urllib.request
+from typing import Awaitable, Callable, Iterable, Mapping, Optional
+
+__version__ = "0.1.0"
+__all__ = ["verify_gate", "verify", "extract_token", "VerificationResult", "VerifyError"]
+
+log = logging.getLogger("agentcert-tag")
+
+DEFAULT_HEADER = "x-agentcert-token"
+DEFAULT_VERIFY_URL = "http://localhost:8080/verify"
+DEFAULT_BLOCK_ON = ("REVOKED", "UNVERIFIED")
+
+
+class VerificationResult(dict):
+    """Structured TAG result. Keys: verification_status, agent_id, cert_valid,
+    trust_score{value,tier}, detail."""
+
+    @property
+    def status(self) -> str:
+        return self.get("verification_status", "ERROR")
+
+    @property
+    def score(self):
+        return (self.get("trust_score") or {}).get("value")
+
+    @property
+    def tier(self) -> str:
+        return (self.get("trust_score") or {}).get("tier", "Unknown")
+
+
+class VerifyError(Exception):
+    """Raised in enforce mode when a verdict is in block_on."""
+
+    def __init__(self, result: VerificationResult):
+        self.result = result
+        super().__init__(f"agentcert-tag blocked: {result.status} ({result.get('detail','')})")
+
+
+def _enabled() -> bool:
+    return os.environ.get("TRUSTMODEL_VERIFY") == "1"
+
+
+def verify(token: Optional[str], *, verify_url: Optional[str] = None, timeout: float = 3.0) -> VerificationResult:
+    """POST the presented credential to the TAG verify endpoint and return its result.
+    Never raises on transport error — returns an ERROR result so the caller's fail
+    policy decides."""
+    url = verify_url or os.environ.get("TRUSTMODEL_VERIFY_URL", DEFAULT_VERIFY_URL)
+    if not token:
+        return VerificationResult(verification_status="UNVERIFIED", cert_valid=False,
+                                  detail="no credential presented")
+    body = json.dumps({"credential": token}).encode()
+    req = urllib.request.Request(url, data=body, headers={"Content-Type": "application/json"})
+    try:
+        with urllib.request.urlopen(req, timeout=timeout) as r:
+            return VerificationResult(**json.loads(r.read().decode()))
+    except Exception as exc:  # noqa: BLE001 - transport failures become an ERROR verdict
+        return VerificationResult(verification_status="ERROR", detail=f"verify unreachable: {exc}")
+
+
+def extract_token(headers: Optional[Mapping[str, str]], header: str = DEFAULT_HEADER) -> Optional[str]:
+    """Case-insensitive lookup of the AgentCert credential header."""
+    if not headers:
+        return None
+    for k, v in headers.items():
+        if k.lower() == header.lower():
+            return v
+    return None
+
+
+def verify_gate(
+    *,
+    mode: str = "shadow",
+    block_on: Iterable[str] = DEFAULT_BLOCK_ON,
+    verify_url: Optional[str] = None,
+    fail_mode: str = "closed",
+    on_result: Optional[Callable[[VerificationResult], None]] = None,
+) -> Callable[[Optional[str]], Awaitable[VerificationResult]]:
+    """Return an async guard(token) -> VerificationResult.
+
+    - Off entirely unless TRUSTMODEL_VERIFY=1 (guard returns immediately).
+    - shadow (default): logs the decision, never raises.
+    - enforce: raises VerifyError when the verdict is in block_on, or on ERROR when
+      fail_mode='closed'.
+    """
+    effective_mode = "enforce" if os.environ.get("TRUSTMODEL_MODE") == "enforce" else mode
+    block = set(block_on)
+
+    async def guard(token: Optional[str]) -> VerificationResult:
+        if not _enabled():
+            return VerificationResult(verification_status="DISABLED")
+        result = verify(token, verify_url=verify_url)
+        log.info("[agentcert-tag] mode=%s status=%s score=%s tier=%s",
+                 effective_mode, result.status, result.score, result.tier)
+        if on_result:
+            try:
+                on_result(result)
+            except Exception:  # noqa: BLE001 - a callback must never break the request
+                log.exception("[agentcert-tag] on_result callback failed")
+        if effective_mode == "enforce":
+            bad = result.status in block or (result.status == "ERROR" and fail_mode == "closed")
+            if bad:
+                raise VerifyError(result)
+        return result
+
+    return guard

trustmodel_agentcert_tag-0.1.0/trustmodel_agentcert_tag.egg-info/PKG-INFO

@@ -0,0 +1,49 @@
+Metadata-Version: 2.4
+Name: trustmodel-agentcert-tag
+Version: 0.1.0
+Summary: Verify an AgentCert + TrustScore inside a Python MCP server (shadow mode, opt-in, dependency-free).
+Author: TrustModel.ai
+License: MIT
+Project-URL: Homepage, https://trustmodel.ai/verify
+Project-URL: Documentation, https://trustmodel.ai/wiki/agentcert/verify-gateway
+Project-URL: Source, https://github.com/pdxlab/agentcert-tag
+Keywords: mcp,agentcert,trustscore,verification,ai-agents,trustmodel
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Intended Audience :: Developers
+Requires-Python: >=3.9
+Description-Content-Type: text/markdown
+
+# trustmodel-agentcert-tag
+
+Verify an **AgentCert + TrustScore** inside a Python MCP server. Thin, dependency-free
+client for a [TAG](https://trustmodel.ai/verify) verify endpoint — **off by default**,
+**shadow mode** when on (logs, never blocks), safe to merge.
+
+```bash
+pip install trustmodel-agentcert-tag
+```
+
+```python
+from trustmodel_agentcert_tag import verify_gate, extract_token
+
+guard = verify_gate(mode="shadow")            # shadow | enforce
+
+async def handle_tool_call(request):
+    token = extract_token(request.headers)    # X-AgentCert-Token (or mTLS-derived)
+    await guard(token)                        # logs (shadow) / raises VerifyError (enforce)
+    return await dispatch(request)
+```
+
+Enable per environment — nothing runs until you opt in:
+
+| Env var | Meaning |
+|---|---|
+| `TRUSTMODEL_VERIFY=1` | turn the gate on (otherwise `guard` is a no-op) |
+| `TRUSTMODEL_VERIFY_URL` | TAG verify endpoint (default `http://localhost:8080/verify`) |
+| `TRUSTMODEL_MODE=enforce` | switch to enforcement |
+
+The gate never reads request payloads (metadata only) and never makes the allow/deny
+decision on its own — it returns a structured verdict (`VERIFIED` / `REVOKED` /
+`UNVERIFIED` / `ERROR`) your server acts on. MIT licensed. Part of
+[pdxlab/agentcert-tag](https://github.com/pdxlab/agentcert-tag).

trustmodel_agentcert_tag-0.1.0/trustmodel_agentcert_tag.egg-info/SOURCES.txt

@@ -0,0 +1,7 @@
+README.md
+pyproject.toml
+trustmodel_agentcert_tag/__init__.py
+trustmodel_agentcert_tag.egg-info/PKG-INFO
+trustmodel_agentcert_tag.egg-info/SOURCES.txt
+trustmodel_agentcert_tag.egg-info/dependency_links.txt
+trustmodel_agentcert_tag.egg-info/top_level.txt

trustmodel_agentcert_tag-0.1.0/trustmodel_agentcert_tag.egg-info/dependency_links.txt

@@ -0,0 +1 @@
+

trustmodel_agentcert_tag-0.1.0/trustmodel_agentcert_tag.egg-info/top_level.txt

@@ -0,0 +1 @@
+trustmodel_agentcert_tag