Attestix

Attestix

Signed identity and evidence for AI agents

Record cryptographically verifiable evidence to support AI governance workflows.

Open-source identity, credentials, compliance automation, and trust scoring.

MCP and REST interfaces, Automated functional tests and Attestix interoperability benchmarks.

Real integrations with LangChain, OpenAI Agents SDK, and CrewAI.

Status: pre-1.0 toolkit; this README describes current main source. Single-maintainer project, community contributions welcome. No independent third-party security audit has been performed yet; deploy with the same diligence you would apply to any pre-1.0 open-source crypto stack.

---

Source and verification status

Python attestix 0.5.0 is published on PyPI and requires Python 3.11 or later. Confirm the release files on PyPI before installing; source metadata alone is not proof of publication. Python 0.4.3 is a previously published release with the Filelock constraint described below. Language SDKs have independent release schedules; verify each registry and pin the version you reviewed.

• Credential verification binds the stated issuer to the supported proof controller. Ambiguous NFC-normalized keys fail before signing or verification.
• Presentation verification requires the caller's expected challenge and domain. A signature alone does not provide replay protection.
• REST use requires an API key by default. The default REST server is single-tenant and rejects non-default tenant headers; a shared API key does not provide cross-tenant authorization.
• JSON updates use the shared storage lock. Protect the local signing key and data directory; test backup restoration, isolation and your selected signer/backend before production.
• workflow_complete describes recorded documentation completion. legal_conformity is not assessed; the deprecated compliant field is a workflow alias. Generated declarations are drafts for provider review.
• Local purge cannot erase external replicas, remote logs, previously shared credentials or third-party backups. Plan historical data and credential migration separately.

Install

Attestix 0.5.0 requires Python 3.11 or later for the patched file-locking dependency. Earlier releases retain their own Python requirements; check the registry files for the version you install.

# Confirm this release is available on PyPI before installing:

pip install attestix==0.5.0

Version 0.4.3 requires filelock<4.0.0 and cannot install patched Filelock 4.2.1. On Unix, keep the Attestix data directory private and prevent other users from replacing its lock path. This limits the conditional local file-truncation risk described in the Filelock advisory. Moving from 0.4.3 to 0.5.0 requires Python 3.11 or later; review the release files before upgrading.

Since 0.4.0, the supported namespace is the canonical

attestix.* namespace. The older flat layout (from services... import,

from auth... import, ...) keeps working via thin deprecation shims that

emit a DeprecationWarning on first import and may be removed in

a future release. Update imports to from attestix.services... import at your earliest

convenience.

CLI

attestix status                          # System overview

attestix init --name MyBot # Create agent identity attestix compliance # Check recorded documentation gaps attestix verify # Verify identity cryptographically attestix audit # View hash-chained audit trail attestix credential --list # List W3C Verifiable Credentials

REST API

pip install 'attestix[api]==0.5.0'

Configure ATTESTIX_API_KEY in your environment before starting the API.

uvicorn attestix.api.main:app --reload # Swagger docs at http://localhost:8000/docs

Web Dashboard

pip install streamlit

streamlit run demo/webapp/app.py # Opens at http://localhost:8501

Quick Demo

python examples/quickstart.py            # Local synthetic workflow

Verify in any language

Attestix credentials use a published canonical-JSON and Ed25519 verification profile. Language-specific verifier repositories share conformance fixtures, but their trust-input and delegation-chain checks differ. Read each verifier README and pin a reviewed version. Cryptographic validity is separate from issuer trust, authorization, revocation and replay policy.

Every verifier targets the Attestix canonical-JSON profile, which differs from strict RFC 8785, and Ed25519 signatures (RFC 8032) against the shared spec/verify/v1 vectors. Verify in the browser at https://attestix.io/verify, or read the bundle wire-format at https://attestix.io/spec/bundle/v1.

Why Attestix

The EU AI Act has a staged application timeline. The European Commission currently lists 2 December 2027 for specified high-risk use cases and 2 August 2028 for high-risk systems embedded in regulated products. Applicability depends on the system and the operator's role. See the European Commission's current AI Act guidance.

Attestix helps organize evidence; a signature or generated declaration does not establish legal conformity or replace the applicable assessment process.

Attestix provides agent identity, signed credentials, delegation, and offline verification for developers who need portable evidence in their applications. Broader governance platforms also offer APIs, SDKs, agent governance, and compliance workflows; evaluate their current capabilities against your requirements.

Agent identity is fragmenting across walled gardens (Microsoft Entra, AWS AgentCore, ERC-8004). Attestix combines agent identity, AI governance evidence and verifiable credentials in one toolkit.

Attestix fills this gap.

---

Modules

---

Quick Start

As an MCP Server (Claude Code)

Add to your Claude Code config (~/.claude.json):

{

"mcpServers": { "attestix": { "type": "stdio", "command": "python", "args": ["-m", "attestix.main"] } } }

Then ask Claude:

"Create an identity for my data analysis agent with capabilities: data_analysis, reporting"

As a Python Library

from attestix.services.identity_service import IdentityService

from attestix.services.compliance_service import ComplianceService from attestix.services.credential_service import CredentialService

identity_svc = IdentityService() compliance_svc = ComplianceService() credential_svc = CredentialService()

1. Create an agent identity

agent = identity_svc.create_identity( display_name="MyAgent", source_protocol="manual", capabilities=["data_analysis", "reporting"], description="Analyzes quarterly financial data", issuer_name="VibeTensor", expiry_days=365, ) agent_id = agent["agent_id"] # attestix:f9bdb7a94ccb40f1 agent_did = agent"issuer" # did:key:z6Mk...

2. Create a compliance profile

profile = compliance_svc.create_compliance_profile( agent_id=agent_id, risk_category="limited", provider_name="VibeTensor", intended_purpose="Analyzes quarterly financial data", )

3. Issue a verifiable credential

credential = credential_svc.issue_credential( subject_id=agent_id, credential_type="AgentIdentityCredential", issuer_name="VibeTensor", claims={"capabilities": ["data_analysis", "reporting"]}, expiry_days=365, ) print(credential"proof") # Ed25519Signature2020

For a complete end-to-end walkthrough covering all 9 modules, run the quickstart:

python examples/quickstart.py

From Source

git clone https://github.com/VibeTensor/attestix.git

cd attestix pip install -r requirements.txt python -m attestix.main

---