Enforcement and accountability layer for AI agents. Bring your own identity. Python implementation of the Agent Passport Protocol, cross-language compatible with the TypeScript SDK. Signatures created in Python verify in TypeScript and the reverse. The Python port is a strict subset of the TS SDK. See the note under "What's Included" below for the current scope boundary.
pip install agent-passport-systemCurrent stable:
2.10.0, installed by default withpip install agent-passport-system. The 2.4 line adds the Wave 1 accountability primitives (ActionReceipt, AuthorityBoundaryReceipt, CustodyReceipt, ContestabilityReceipt, APSBundle), Cognitive Attestation (Paper 4), and Instruction Provenance Receipts (v0.2). It also adds evidentiary type safety: a claim and evidence registry, a claim verifier, and a contestation cascade. All primitives are tested for byte-identical canonical JSON against the TypeScript SDK npm 3.1.0 fixtures.
Lead with the minimum you need to get a signed passport and a verifiable delegation: identity, delegation, and policy evaluation. Import the rest from agent_passport when you need it. Full protocol surface (all 8 layers: attribution, values, agora, intent, coordination, commerce) is still available on the same package.
fromagent_passportimport (
generate_key_pair, create_passport, sign_passport, verify_passport,
create_delegation, verify_delegation, create_action_receipt,
# full surface available, import more when you need it:# build_merkle_root, load_floor, attest_floor, evaluate_compliance, ...
)
# Create agent identity (Ed25519)keys=generate_key_pair()
passport=create_passport(
agent_id="agent-alpha-001",
public_key=keys["public_key"],
capabilities=["code_execution", "web_search"]
)
signed=sign_passport(passport, keys["private_key"])
assertverify_passport(signed, keys["public_key"])
# Delegate authoritydelegation=create_delegation(
from_agent="human-001",
to_agent="agent-alpha-001",
scope=["code_execution"],
private_key=keys["private_key"],
spend_limit=500
)
assertverify_delegation(delegation, keys["public_key"])
# Record work as signed receiptreceipt=create_action_receipt(
agent_id="agent-alpha-001",
delegation_id=delegation["id"],
action="code_execution",
scope_used="code_execution",
private_key=keys["private_key"],
spend=50,
result="success",
description="Implemented feature X"
)
# Merkle proofs for attributionhashes= [receipt["receipt_hash"]]
root=build_merkle_root(hashes)
proof=get_merkle_proof(hashes, hashes[0])
assertverify_merkle_proof(hashes[0], proof, root)| Module | Layer | What It Does |
|---|---|---|
crypto | base | Ed25519 key generation, signing, verification |
canonical | base | Deterministic JSON serialization (cross-language compatible) |
passport | 1 | Agent identity creation, signing, verification, expiry |
delegation | 1 | Scoped delegation chains, sub-delegation, revocation |
values | 2 | Human Values Floor: load YAML/JSON, attestation, compliance, graduated enforcement |
attribution | 3 | Merkle proofs, beneficiary tracing, contribution tracking |
agora | 4 | Signed message feeds, topics, threading, agent registry |
intent | 5a | Roles, deliberation, consensus, tradeoff evaluation, precedents |
policy | 5b | 3-signature chain, FloorValidatorV1, action intents |
coordination | 6 | Task lifecycle: briefs, evidence, review, handoff, deliverables |
integration | 7 | Cross-layer bridges (commerce+intent, coord+agora, etc.) |
commerce | 8 | 4-gate checkout, human approval, spend tracking, receipts |
The Python SDK produces identical canonical JSON and Ed25519 signatures as the TypeScript SDK. This means:
- A passport signed in Python can be verified in TypeScript
- Delegation chains can span Python and TypeScript agents
- Merkle roots computed from the same receipts match across languages
fromagent_passportimportcanonical_json# Same input produces identical output in Python and TypeScriptdata= {"z": 1, "a": 2, "nested": {"b": 3, "a": 1}}
assertcanonical_json(data) =='{"a":2,"nested":{"a":1,"b":3},"z":1}'This Python SDK implements all 8 Agent Passport Protocol layers:
- Identity + Delegation: Ed25519 passports, scoped delegation chains, cascade revocation
- Human Values Floor: 7 principles (F-001 through F-007), graduated enforcement (inline/audit/warn)
- Beneficiary Attribution: Merkle proofs for contribution tracking
- Agent Agora: Signed message feeds with topics, threading, and agent registry
- Intent Architecture + Policy Engine: Roles, deliberation, consensus, 3-signature policy chain
- Coordination: Full task lifecycle: briefs, evidence, review, handoff, deliverables
- Integration Wiring: Cross-layer bridges (commerce+intent, coordination+agora)
- Agentic Commerce: 4-gate checkout, human approval, spend limits
Cross-language parity with the TypeScript SDK at npm v4.3.0. Python SDK 2.10.0 ships the full Wave 1 surface: ActionReceipt, AuthorityBoundaryReceipt, CustodyReceipt, ContestabilityReceipt, APSBundle (with balanced Merkle commitment), Cognitive Attestation (Paper 4: three-stage verification, typed dispute primitives), and Instruction Provenance Receipts v0.2 (path canonicalization, context-root binding, action-time recompute). The four evidentiary type safety primitives also ship in 2.10.0. All surfaces are tested against TS-issued fixtures for byte-identical canonical JSON. Cross-language signature verification covers every signed primitive in the SDK. Also available via the MCP server.
- Website: https://agent-passport.org
- TypeScript SDK: https://www.npmjs.com/package/agent-passport-system
- Go SDK: https://pkg.go.dev/github.com/aeoess/agent-passport-go
- MCP Server: https://www.npmjs.com/package/agent-passport-system-mcp
- Remote MCP: https://mcp.aeoess.com/sse
- Papers:
- LLM docs: https://agent-passport.org/llms-full.txt
pip install -e ".[test]"
pytest tests/
# 568 passed, 1 skipped, 6 xfailed. Coverage spans all 8 protocol layers# plus the v2 evidentiary type safety, Wave 1 accountability, Cognitive Attestation,# and Instruction Provenance Receipt surfaces. The cross-impl byte-parity tests assert# byte-identical canonical JSON against TS-issued fixtures (rfc8785 ships in the test# extra). Two cross-language tests also need the agent-passport-system TS SDK checked# out next to this repo; without that sibling they skip (566 passed, 3 skipped).Apache-2.0