AgentSign

AgentSign is an open-source zero trust framework designed specifically for autonomous digital agents. It provides a robust identity and trust infrastructure to ensure secure operations. Key features include: • Cryptographic agent passports for identity verification • Identity pipeline for agent lifecycle management • Trust scoring from 0-100 to assess agent reliability • Swarm revocation for instant untrusting of compromised agents • HSM support for enhanced security This engine ensures that every agent carries a self-contained, signed JSON passport, proving its identity offline. Before an agent can access any critical resource or execute a task, AgentSign verifies its identity, trust score, and pipeline stage, making an ALLOW or DENY decision. This prevents unauthorized actions and provides a verifiable audit trail for all agent activities. AgentSign is built for teams deploying digital agents in sensitive environments, offering self-hosted, on-premise deployment with zero runtime dependencies. It’s an essential tool for maintaining security and accountability when agents handle critical operations like financial transactions, database access, or code deployment. Seamlessly integrate with frameworks like OpenHands, CrewAI, and LangChain to secure your agent operations.