https://github.com/golf-mcp/authed-identity
Open-source authentication protocol for agentic interactions. Let agents collaborate with Authed
https://github.com/golf-mcp/authed-identity
agentic-framework agentic-infrastructure agents ai authentication authorization identity ids oauth oauth2 python requests
Last synced: 3 months ago
JSON representation
Open-source authentication protocol for agentic interactions. Let agents collaborate with Authed
- Host: GitHub
- URL: https://github.com/golf-mcp/authed-identity
- Owner: golf-mcp
- License: mit
- Created: 2025-04-03T14:38:01.000Z (about 1 year ago)
- Default Branch: main
- Last Pushed: 2025-04-07T19:26:25.000Z (about 1 year ago)
- Last Synced: 2025-06-17T09:42:42.722Z (12 months ago)
- Topics: agentic-framework, agentic-infrastructure, agents, ai, authentication, authorization, identity, ids, oauth, oauth2, python, requests
- Language: Python
- Homepage: https://getauthed.dev
- Size: 465 KB
- Stars: 5
- Watchers: 0
- Forks: 2
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Contributing: .github/CONTRIBUTING.md
- License: LICENSE
- Code of conduct: .github/CODE_OF_CONDUCT.md
- Security: .github/SECURITY.md
Awesome Lists containing this project
README
# Authed Identity
**Identity and authentication for AI Agents**
[](https://opensource.org/licenses/MIT)
[](https://github.com/authed-dev/authed/pulls)
[](https://github.com/authed-dev/authed/issues)
[](https://pypi.org/project/authed/)
Authed | [Docs](https://docs.getauthed.dev)
> **Note**: Authed Identity was moved from the old [Authed](https://github.com/authed-dev/authed) repository, Authed 2.0 coming soon!
## Overview
Authed is an identity and authentication system built specifically for AI agents. As AI agents become active participants on the internet, they need secure, scalable ways to identify themselves and authenticate with each other across different systems and organizations.
Traditional authentication methods like OAuth and API keys were designed for human users and applications, forcing agents to rely on static credentials that don't scale with the dynamic nature of AI interactions. Authed solves this problem by giving agents their own identity.
Authed is a developer-first, open-source protocol that:
- Provides unique identities for AI agents
- Enables secure agent-to-agent authentication across different ecosystems
- Eliminates the need for static credentials
- Removes human bottlenecks from authentication workflows
- Dynamically enforces access policies between trusted entities
## Quick start
Get up and running with Authed in two simple steps:
### 1. Install the SDK
```bash
pip install authed
```
### 2. Initialize Your First Agent
For development (limited to 3 agents):
```bash
authed init setup
```
This command will:
- Create a new unclaimed provider
- Set up a default agent
- Generate a secure key pair in PEM format
- Create `.env` with all required configuration
- Add `.env` to `.gitignore`
For production use:
1. Visit [getauthed.dev](https://getauthed.dev/) to claim your provider
2. Initialize with your provider credentials:
```bash
authed init setup --provider-id "your-provider-id" --provider-secret "your-provider-secret"
```
## Basic integration
Here's a minimal example using FastAPI:
```python
from fastapi import FastAPI, Request
from authed import Authed, verify_fastapi, protect_httpx
import httpx
app = FastAPI()
# Initialize Authed from environment variables (configured by `authed init setup`)
auth = Authed.from_env()
# Protected endpoint
@app.post("/secure-endpoint")
@verify_fastapi
async def secure_endpoint(request: Request):
return {"message": "Authenticated!"}
# Making authenticated requests
@app.get("/call-other-agent")
@protect_httpx()
async def call_other_agent():
async with httpx.AsyncClient() as client:
response = await client.post(
"http://other-agent/secure-endpoint",
headers={"target-agent-id": "target-agent-uuid"},
json={"message": "Hello!"}
)
return response.json()
```
## Environment setup
Configure Authed using environment variables:
```
# Registry and agent configuration
AUTHED_REGISTRY_URL="https://api.getauthed.dev"
AUTHED_AGENT_ID="your-agent-id"
AUTHED_AGENT_SECRET="your-agent-secret"
# Keys for signing and verifying requests
AUTHED_PRIVATE_KEY="your-private-key"
AUTHED_PUBLIC_KEY="your-public-key"
```
## Documentation
For more detailed documentation, visit our [official documentation](https://docs.getauthed.dev).
## Integrations
Authed provides integrations with various external systems and protocols:
### Model Context Protocol (MCP)
Authed can be used as an authentication layer for the [Model Context Protocol (MCP)](https://modelcontextprotocol.io), enabling secure access to MCP servers and resources. See the [MCP integration documentation](integrations/mcp/README.md) for details.
## Why choose Authed?
#### Designed for agent interactions
Authed is built specifically for the way AI agents interact - dynamic, distributed, and requiring minimal human intervention.
#### Secure by design
Our protocol uses robust cryptographic signatures and verification mechanisms to ensure agents only interact with trusted entities.
#### Scalable identity
As your ecosystem of agents grows, Authed scales with you - no need to manage ever-growing lists of API keys or credentials.
## Agent-to-Agent communication
Authed provides a Channel component for secure, authenticated communication between agents using WebSockets. This enables agents to establish connections, exchange messages, and maintain persistent communication channels with minimal setup.
### Key keatures
- **Secure WebSocket communication**: Establish authenticated WebSocket connections between agents
- **Message handling**: Register custom handlers for different message types
- **Connection management**: Automatically manage multiple connections
- **Authentication integration**: Leverages Authed's core authentication system
### Quick example
```python
# Initialize Authed
auth = Authed.from_env()
# Create a channel
channel = auth.create_channel()
# Open a channel to another agent
target_channel = await channel.open_channel(
target_agent_id="target-agent-id",
websocket_url="wss://target-agent-domain.com/ws"
)
# Send a message
await channel.send_message(
channel=target_channel,
content_type=MessageType.REQUEST,
content_data={"text": "Hello from Agent A!"}
)
# Receive a response
response = await channel.receive_message(target_channel)
```
See the [Channel documentation](https://docs.getauthed.dev/channels) for more details and examples.
## Roadmap
We are working hard on new features!
- **Self-hosted registries**: Adding support and documentation for self-hosting registries
- **Registry interoperability**: Expanding registry to make them interoperable, allowing agents to authenticate across registries with the same ID
- **Instance-based IDs**: Adding support for instance-based identities
- **Instance binding**: Adding instance binding to agent IDs
- **OpenID integration**: Adding OpenID identity binding for end users
- **Enhanced permissions**: Expanding the permission engine to allow more fine-grained permissions
Made with ❤️ in Warsaw, Poland and SF