AgentVeil Protocol
Trust, identity, and reputation infrastructure for AI agents. Register agents with W3C DID (Ed25519), check EigenTrust reputation scores, submit peer attestations, search agents by capability, and verify IPFS-anchored audit trails. 11 tools.
README
agentveil
Python SDK for Agent Veil Protocol — trust enforcement for autonomous agents.
PyPI: agentveil | API: agentveil.dev | Network: Live Network
Why agent trust infrastructure matters — verified CVEs, market data, and the structural problem AVP addresses.
Open-source contribution merged into Microsoft Agent Governance Toolkit — AVPProvider added as a TrustProvider implementation (PR #1010, merged upstream).
Paper: Boiko, O. (2026). Why AI Agent Reputation Needs Both Link Analysis and Flow-Based Gating. Zenodo.
<p align="center"> <img src="docs/demo.gif" alt="AVP SDK Demo — trust check, action, signal change, alert, offline proof" width="720"> </p>
Full end-to-end walkthrough:
examples/proof_pack/— annotated example of the complete arc: trust check → delegation → signal change → alert → offline-verifiable proof. Requires a local AVP backend.
from agentveil import AVPAgent
agent = AVPAgent.load("https://agentveil.dev", "my-agent")
# Should I trust this agent with my task?
decision = agent.can_trust("did:key:z6Mk...", min_tier="trusted")
if decision["allowed"]:
delegate_task()
# → {"allowed": true, "tier": "trusted", "risk_level": "low", "reason": "..."}
Install
pip install agentveil
Quick Start
Trust decision — one call
from agentveil import AVPAgent
agent = AVPAgent.load("https://agentveil.dev", "my-agent")
decision = agent.can_trust("did:key:z6Mk...", min_tier="trusted")
print(decision["allowed"], decision["reason"])
Auto-track with decorator
from agentveil import avp_tracked
@avp_tracked("https://agentveil.dev", name="reviewer", to_did="did:key:z6Mk...")
def review_code(pr_url: str) -> str:
return analysis
# Success → positive attestation | Exception → negative attestation
# First call → auto-registers agent + publishes card
Try without a server
agent = AVPAgent.create(mock=True, name="test_agent")
agent.register(display_name="Test Agent")
rep = agent.get_reputation()
print(rep) # Works offline — real crypto, mocked HTTP
Verify trust offline — no SDK required
# Get a W3C Verifiable Credential (VC v2.0)
curl https://agentveil.dev/v1/reputation/{agent_did}/credential?format=w3c
The response is a standard W3C VC with a DataIntegrityProof (eddsa-jcs-2022). Verify it with any VC library — Veramo, SpruceID, Digital Bazaar, or your own Ed25519 implementation. No AVP SDK needed.
# Or verify with the SDK:
cred = agent.get_reputation_credential(format="w3c")
assert AVPAgent.verify_w3c_credential(cred) # offline, no API call
Features
- Trust Check —
can_trust()— one-call advisory trust decision: score + tier + risk + explanation - W3C VC v2.0 Credentials — Trust credentials are W3C Verifiable Credentials compliant (
eddsa-jcs-2022Data Integrity proof). Verify offline with any standard VC library, no AVP SDK required - One-Line Decorator —
@avp_tracked()— auto-register, auto-attest, auto-protect - DID Identity — W3C
did:key(Ed25519). Portable agent identity - Reputation — Peer-attested scoring with Bayesian confidence. Sybil-resistant
- Attestations — Signed peer-to-peer ratings. Negative ratings require SHA-256 evidence. Score updates immediately
- Dispute Protection — Contest unfair ratings. Auto-assigned arbitrator from verified pool
- Agent Discovery — Publish capabilities, find agents by skill and reputation
- Webhook Alerts — Push notifications on score drops (setup guide)
- Sybil Resistance — Multi-layer graph analysis blocks fake agent rings
- Trust Gate — Reputation-based rate limiting (newcomer → basic → trusted → elite)
Integrations
| Framework | Install | Quick Start |
|---|---|---|
| Any Python | pip install agentveil |
@avp_tracked() or AVPAgent directly |
| CrewAI | pip install agentveil crewai |
tools=[AVPReputationTool(), AVPDelegationTool()] |
| LangGraph | pip install agentveil langgraph |
ToolNode([avp_check_reputation, avp_should_delegate]) |
| AutoGen | pip install agentveil autogen-core |
tools=avp_reputation_tools() |
| OpenAI | pip install agentveil openai |
tools=avp_tool_definitions() |
| Claude | pip install 'agentveil[mcp]' |
agentveil-mcp — MCP server, docs |
| Hermes | pip install 'agentveil[mcp]' |
agentveil-mcp + agentskills.io skill |
| Paperclip | pip install agentveil |
avp_should_delegate() + avp_evaluate_team() |
| AWS Bedrock | pip install agentveil boto3 |
Converse API with AVP trust tools |
| AgentMesh (MS AGT) | pip install agentmesh-avp |
TrustEngine(external_providers=[AVPProvider()]) |
Full integration guides: docs/INTEGRATIONS.md
Batch Attestations
Submit up to 50 attestations in a single request. Each is validated independently — partial success is possible.
results = agent.attest_batch([
{"to_did": "did:key:z6MkAgent1...", "outcome": "positive", "weight": 0.9, "context": "code_review"},
{"to_did": "did:key:z6MkAgent2...", "outcome": "negative", "weight": 0.7, "evidence_hash": "sha256hex..."},
{"to_did": "did:key:z6MkAgent3...", "outcome": "positive"},
])
print(results["succeeded"], results["failed"]) # 3, 0
Each attestation is individually signed with Ed25519. Optional fields: context, evidence_hash, is_private, interaction_id.
Security
- Ed25519 signature authentication with nonce anti-replay
- Input validation — injection detection, PII scanning
- Agent suspension — compromised agents instantly blocked
- Audit trail — SHA-256 hash-chained log, anchored to IPFS
Documentation
| Doc | Description |
|---|---|
| API Reference | Full SDK method reference with examples |
| Integrations | Framework-specific setup guides |
| Webhook Alerts | Push notification setup |
| Protocol Spec | Wire format and authentication |
| Security Context | Why agent trust matters — CVEs and market data |
| Changelog | Version history |
Examples
| Example | Description |
|---|---|
proof_pack/ |
End-to-end walkthrough — trust check → delegation → signal change → alert → offline-verifiable proof. Local backend required. |
standalone_demo.py |
No server needed — full SDK demo with mock mode |
quickstart.py |
Register, publish card, check reputation |
two_agents.py |
Full A2A interaction with attestations |
verify_credential_standalone.py |
Offline credential verification (no SDK needed) |
Framework examples: CrewAI · LangGraph · AutoGen · OpenAI · Claude MCP · Paperclip
License
MIT — see LICENSE.
推荐服务器
Baidu Map
百度地图核心API现已全面兼容MCP协议,是国内首家兼容MCP协议的地图服务商。
Playwright MCP Server
一个模型上下文协议服务器,它使大型语言模型能够通过结构化的可访问性快照与网页进行交互,而无需视觉模型或屏幕截图。
Magic Component Platform (MCP)
一个由人工智能驱动的工具,可以从自然语言描述生成现代化的用户界面组件,并与流行的集成开发环境(IDE)集成,从而简化用户界面开发流程。
Audiense Insights MCP Server
通过模型上下文协议启用与 Audiense Insights 账户的交互,从而促进营销洞察和受众数据的提取和分析,包括人口统计信息、行为和影响者互动。
VeyraX
一个单一的 MCP 工具,连接你所有喜爱的工具:Gmail、日历以及其他 40 多个工具。
graphlit-mcp-server
模型上下文协议 (MCP) 服务器实现了 MCP 客户端与 Graphlit 服务之间的集成。 除了网络爬取之外,还可以将任何内容(从 Slack 到 Gmail 再到播客订阅源)导入到 Graphlit 项目中,然后从 MCP 客户端检索相关内容。
Kagi MCP Server
一个 MCP 服务器,集成了 Kagi 搜索功能和 Claude AI,使 Claude 能够在回答需要最新信息的问题时执行实时网络搜索。
e2b-mcp-server
使用 MCP 通过 e2b 运行代码。
Neon MCP Server
用于与 Neon 管理 API 和数据库交互的 MCP 服务器
Exa MCP Server
模型上下文协议(MCP)服务器允许像 Claude 这样的 AI 助手使用 Exa AI 搜索 API 进行网络搜索。这种设置允许 AI 模型以安全和受控的方式获取实时的网络信息。