OpenViSTAI · Agents · Blockchain · Crypto
Submit a project
Menu
Agent Security & Sandboxing

Tenuo

Tenuo is an open-source authorization library for AI agents. It issues and checks signed warrants that define permitted tools, argument constraints and duration; permissions can narrow as tasks are delegated. Checks can run in-process or at a sidecar or gateway, and sensitive actions can require signed human approval.

Explore the practical guide ↓

Independent OpenViST project profile, based on linked sources.

Tenuo — OpenViST project profile in Agent Security & Sandboxing.
OpenViST project illustration. See the linked sources for product details.
Understand the project

Practical overview

When it fits

Use Tenuo when an agent needs bounded access to tools and you want authorization checked at the point an action runs, including across delegated tasks or an MCP server boundary.

Who it is for

  • Teams adding authorization checks to AI-agent tools.
  • Developers who need delegated tasks to operate with no more authority than their parent task.
  • Engineers integrating warrant verification with MCP, LangChain or LangGraph.

Documented uses

  • Limit an agent to specified tools and constrain the arguments it may pass.
  • Make delegated permissions narrower than the authority of the parent task.
  • Require signed human approval for selected sensitive actions.
  • Verify authorization at a tool boundary and retain signed evidence of authorization decisions.
Before you choose

Requirements & limits

The repository identifies the library as Apache-2.0 licensed. Its README documents Python, Rust and beta TypeScript SDK installation paths.

  • The Python quick start uses development-only settings that relax trust-root and audit-log checks; production configuration is separate.
  • For MCP server verification, the documented pattern trusts the issuer's public key and requires a warrant.
  • The README specifies Node.js 20 or later for the beta TypeScript SDK.
  • Python support is listed for Linux, macOS and Windows; other platforms may require building from source with Rust.

Check current requirements in the official documentation. Source-based guidance does not mean OpenViST has run or independently tested this project.

Source-based practical guide

Set up Tenuo authorization for an MCP server

Configure the documented server-side warrant verification pattern for an MCP tool boundary.

Before you start

  • Python installation of Tenuo with the FastMCP extra.
  • FastMCP and an issuer public key made available to the server as TENUO_ISSUER_PUB.
  • The server's trusted-roots configuration must use the issuer public key.

Steps

  1. Install the documented FastMCP integration with the command below.

    Documented command
    pip install "tenuo[fastmcp]"

  2. Create an Authorizer using the issuer public key as a trusted root.

  3. Configure MCPVerifier with require_warrant=True and attach TenuoMiddleware to the FastMCP server.

  4. Run the server using the documented stdio transport.

Expected outcome

The MCP server is configured to verify warrants on tool calls using the issuer's public key.

Guide limitations

  • The README example is a configuration pattern; it does not establish that a particular deployment has been tested.
  • The server example does not provide the issuer signing key to the server.
  • Production configuration is covered separately by the production guide.
Documentation 1 ↗
Evidence and transparency

Sources & review

Official repository ↗
Source record details
Source availability
Active
Sources checked
13 October 2026
Original website title
tenuo-ai/tenuo · Official homepage title · retained in its source language
How we review sourcesSuggest a correction