Agent Trust
Prove what an autonomous AI agent is authorized to do. An open profile plus a reference implementation for agent identity, principal binding, delegation with attenuation, capability-based authorization, request proof-of-possession, authorization attestations, tamper-evident provenance, single-use permits, cross-organization revocation and declared effect paths — carried on JWS, OAuth/OIDC, SPIFFE/WIMSE, AuthZEN, OpenID Federation, MCP and A2A. No new cryptography, no new protocol.
No consequential agent action should be accepted because a process is running or a token is valid. It should be accepted because the action is attributable, authorized, constrained, current and verifiable.
| Package | What it is |
|---|---|
packages/verifier | The pure core: parsing, delegation chain + attenuation, policy engine, request proof, delegation credentials, attestations, the 12-step evidence pipeline. Deterministic, dependency-free, WebCrypto only. |
packages/sdk-ts | mnki-sdk — TypeScript SDK: agent identity (keys, signed requests), guard() for any tool call, verify, delegate, attest, request grants from an access broker, offline verification against an organization's JWKS; framework adapters as subpaths. |
packages/cli | mnki-cli — mnki demo · init · identity · verify · inspect · delegate · attest · access · scan · protect · conformance (agenttrust is an alias). |
packages/mcp | mnki-mcp — a local MCP proxy that verifies every tools/call before it reaches the server (mnki protect installs it). |
python/ | pip install mnki — Python SDK (zero dependencies; mnki[signing] for Agent-Proof). |
go/ | Go verifier (same vectors, no dependencies) and at-verify, the self-hosted verifier that serves /v1/verify from an exported organization snapshot. |
spec/ | Agent Trust Profile v0.2, the interoperability positioning, the Internet-Draft (draft-mnki-agent-trust-profile-00) and the standards plan. |
conformance/ | Executable vectors for certification levels 1–3 (LEVELS.md) — the cross-language contract; the TypeScript, Go and Python runners pass them all. |
npx mnki-cli demo # the 15-second story, no account: a €47,000 refund denied, €420 allowed
npx mnki-cli scan # find the MCP servers and API keys agents can use on this machine
npm install mnki-sdk # guard() any tool call
pip install mnki # same in Python
Develop against the open verifier and SDKs for free; govern fleets with the hosted control plane at mnki.com — see COMMERCIAL.md for the boundary and TRADEMARK.md for name and badge use. Releases carry npm/PyPI provenance, SBOMs and cosign-signed checksums (SECURITY.md).
Apache-2.0.