SharkAuth

SharkAuth is an open-source identity platform meticulously crafted for autonomous agents rather than traditional user and application authentication. It provides a robust authentication server designed for secure agent delegation, ensuring that agents can securely interact with tools and keys while adhering to defined scopes and revocations. Key features include DPoP-bound agent access, which secures tokens against misuse, and revocable `may_act` grants, offering granular control over agent capabilities. SharkAuth also facilitates delegation chains, enabling complex, multi-agent interactions, and cascade revocation, which ensures that revoking a primary agent's access automatically revokes all delegated permissions. Audit trails via `grant_id` provide complete transparency and traceability for all agent activities. This platform is delivered as a single, self-hosted Go binary, with SQLite embedded by default for zero-dependency operation. It implements modern authentication standards such as OAuth 2.1, OIDC, RFC 8693 Token Exchange, and DPoP, making it highly compatible and secure. Its lightweight footprint and ease of deployment make it ideal for various environments, from cloud deployments to air-gapped edge systems. Built for engineering teams managing complex interconnected systems, SharkAuth provides critical infrastructure for secure inter-agent communication and resource access. It ensures that autonomous systems operate within clearly defined boundaries while offering the flexibility required for advanced operations.