I built open-source auth for AI agents (Go, single binary)

Secrets & Credentials

Open‑source identity provider built for AI agents – a single ~29 MB binary offering OAuth 2.1 RFC 8693 token exchange, DPoP‑bound tokens and full audit trails.

Track releases GitHub

Go Latest v0.1.0 · 1mo ago Security brief →

Features

Agent delegation via RFC 8693 Token Exchange with revocable, hop‑constrained grants
Demonstrating Proof‑of‑Possession (DPoP) for all issued tokens to bind them cryptographically to agent keys
Complete provenance – one grant ID correlates every token hop and resource access
Single static Go binary with embedded SQLite; zero external dependencies required
Open‑source MIT license, no vendor lock‑in or telemetry beyond an opt‑out install ping

Recent releases

View all 1 releases →

v0.1.0 Bug fix 1mo

Security fixes

Fixed launch security regressions
Hardened update probe and revocation demo

Notable features

Added dashboard favicon glyph
Added session pagination controls
Consumes firstboot admin key after first display

Full changelog

Changelog

6780e69543b998b759c99021e7cb5da248a19977 Add dashboard favicon glyph
d60df545bca40fab98c90ed95e34bc6304f39573 Add session pagination controls
649bb3710eb2947eb7e313df916b40c811f4b380 Consume firstboot admin key after first display
88c7bf8ae1ba5226b6994613a9d032b41f7b22d9 Fix DPoP delegation metadata and canvas status
a79642fdd04a0ff3afc1b377233611800ff8cdab Fix SharkClaw SDK delegation demo
62fdf1ab4fbb3e8e0b16a9d19affbd41b9553f89 Fix admin session and agent count display
fd1589fa24c23f10c2a76fbc4e5727fffa5dddca Fix agent delegation demo and drawer status
09052506e1ca806f235544c7e74920d86c091dc3 Fix delegation canvas revocation and trace attribution
2f7714f0b81e7b08c9a631222deca4be56a799e9 Fix duplicate delegation chain hops
6926eb3a97bdf31c49e7e6c2d956a4dd0c3d3c1c Fix filtered user totals in admin list
1ed06d2a0499d91fa84e45313eaac8cca65581e1 Fix launch security regressions
ff02e976b89197ab9daad094ff404240d4d7069c Harden update probe and revocation demo
8289e6a54243d2acb13532033cb9e00b8c1a62cf Update token exchange smoke grant setup