OpenViSTAI · Agents · Blockchain · Crypto
Submit a project
Menu
Agent Infrastructure

Attestix

Attestix is an open-source Python toolkit for creating cryptographically verifiable AI agent identities and credentials, recording governance evidence and supporting delegated authority. It provides CLI, MCP and REST interfaces, plus offline verifier SDKs.

Explore the practical guide ↓

Independent OpenViST project profile, based on linked sources.

Attestix — OpenViST project profile in Agent Infrastructure.
OpenViST project illustration. See the linked sources for product details.
Understand the project

Practical overview

When it fits

Use Attestix when an agent application needs machine-verifiable identity or credential records and a way to carry governance evidence alongside its workflow. It is especially relevant when teams need CLI or library workflows, service interfaces, or offline credential verification.

Who it is for

  • Developers building AI agents who need to issue and manage signed identities or credentials.
  • Teams recording portable governance evidence as part of agent workflows.
  • Integrators connecting agent identity operations to MCP, REST, LangChain, OpenAI Agents SDK or CrewAI.

Documented uses

  • Create an agent identity with declared capabilities and descriptive information.
  • Issue a verifiable credential containing claims about an agent.
  • Record compliance-profile information and inspect documented workflow gaps.
  • Verify identities cryptographically and review a hash-chained audit trail.
  • Expose identity and evidence operations to agent systems through MCP or REST.
Before you choose

Requirements & limits

The project is open source under the Apache-2.0 license. The README documents installation as a Python package and use as a CLI, library or self-hosted REST service. REST use requires an API key by default.

  • Attestix is described as a pre-1.0 toolkit; the README recommends reviewing release notes and pinning a version.
  • The default REST server is single-tenant and rejects non-default tenant headers; a shared API key does not provide cross-tenant authorization.
  • Credential verification uses a canonical-JSON and Ed25519 profile, but cryptographic validity is separate from issuer trust, authorization, revocation and replay policy.
  • The README says generated declarations are drafts for provider review and that legal conformity is not assessed.
  • The project states that it has not had an independent third-party security audit; local signing keys and data require careful operational handling.

Check current requirements in the official documentation. Source-based guidance does not mean OpenViST has run or independently tested this project.

Source-based practical guide

Create an agent identity and issue a credential in Python

Set up a basic identity, compliance profile and verifiable identity credential using the documented Python library workflow.

Before you start

  • Python and the Attestix package installed.
  • The documented Python library modules: IdentityService, ComplianceService and CredentialService.

Steps

  1. Create an identity with a display name, capabilities, description, issuer name and expiry period.

  2. Use the returned agent ID to create a compliance profile with a risk category, provider name and intended purpose.

  3. Issue an AgentIdentityCredential for that subject, including capability claims and an expiry period.

Expected outcome

An agent identity, compliance profile and credential whose proof type is shown in the example as Ed25519Signature2020.

Guide limitations

  • The example demonstrates record creation, not a complete production deployment or policy assessment.
  • A valid signature does not by itself establish issuer trust, authorization, revocation status or replay protection.
Documentation 1 ↗
Evidence and transparency

Sources & review

Official repository ↗
Source record details
Source availability
Active
Sources checked
12 October 2026
Original website title
VibeTensor/attestix · Official homepage title · retained in its source language
How we review sourcesSuggest a correction