Attestix

Attestix

Signed identity and evidence for AI agents

Record cryptographically verifiable evidence to support AI governance workflows. Open-source identity, credentials, compliance automation, and trust scoring. MCP and REST interfaces, Automated functional tests and Attestix interoperability benchmarks. Real integrations with LangChain, OpenAI Agents SDK, and CrewAI.

Status: pre-1.0 toolkit; this README describes current main source. Single-maintainer project, community contributions welcome. No independent third-party security audit has been performed yet; deploy with the same diligence you would apply to any pre-1.0 open-source crypto stack.

---

Source and verification status

Published runtime hardening is available in Python attestix 0.4.2 on PyPI. This source also prepares the 0.4.3 website/documentation update; source metadata is not proof of registry publication. The JavaScript offline verifier is also published as npm attestix 0.4.2. Main may contain later changes; compare release notes and pin the version you reviewed. Go and Java 0.4.2 are published. R and Rust have GitHub 0.4.2 releases, while CRAN and crates.io still serve 0.4.1 at this release cutoff.

• Credential verification binds the stated issuer to the supported proof controller. Ambiguous NFC-normalized keys fail before signing or verification.
• Presentation verification requires the caller's expected challenge and domain. A signature alone does not provide replay protection.
• REST use requires an API key by default. The default REST server is single-tenant and rejects non-default tenant headers; a shared API key does not provide cross-tenant authorization.
• JSON updates use the shared storage lock. Protect the local signing key and data directory; test backup restoration, isolation and your selected signer/backend before production.
• workflow_complete describes recorded documentation completion. legal_conformity is not assessed; the deprecated compliant field is a workflow alias. Generated declarations are drafts for provider review.
• Local purge cannot erase external replicas, remote logs, previously shared credentials or third-party backups. Plan historical data and credential migration separately.

Install

# Reviewed release (check release notes before upgrading):
pip install attestix==0.4.2

Since 0.4.0, the supported namespace is the canonical attestix.* namespace. The older flat layout (from services... import, from auth... import, ...) keeps working via thin deprecation shims that emit a DeprecationWarning on first import and are scheduled for removal in v0.5.0. Update imports to from attestix.services... import at your earliest convenience.

CLI

attestix status                          # System overview
attestix init --name MyBot               # Create agent identity
attestix compliance            # Check recorded documentation gaps
attestix verify                # Verify identity cryptographically
attestix audit                 # View hash-chained audit trail
attestix credential --list               # List W3C Verifiable Credentials

REST API

pip install 'attestix[api]'
# Configure ATTESTIX_API_KEY in your environment before starting the API.
uvicorn attestix.api.main:app --reload   # Swagger docs at http://localhost:8000/docs

Web Dashboard