Metadata-Version: 2.5
Name: aidr-verifier
Version: 0.1.0
Summary: Verify AI agents' AIDR identities on your own site, offline: credentials and RFC 9421 signatures.
Project-URL: Homepage, https://aidr.evolivcore.com
Project-URL: Documentation, https://evolivcore.com/resources
Author: Evoliv Core
License-Expression: Apache-2.0
License-File: LICENSE
Keywords: ai-agents,aiaf,aidr,bot-verification,identity,rfc9421
Classifier: Development Status :: 3 - Alpha
Classifier: Operating System :: OS Independent
Classifier: Programming Language :: Python :: 3
Classifier: Topic :: Security
Requires-Python: >=3.10
Requires-Dist: aidr-crypto<0.2,>=0.1
Requires-Dist: httpx>=0.27
Provides-Extra: fastapi
Requires-Dist: fastapi>=0.110; extra == 'fastapi'
Description-Content-Type: text/markdown

# aidr-verifier

Verify an AI agent's identity on your own site, offline: the agent's credential (signed by the
[AIDR](https://aidr.evolivcore.com) registry) and its RFC 9421 request signature. Nothing in the
request path calls the registry.

```
pip install "aidr-verifier[fastapi]"
```

ASGI (FastAPI, Starlette): the middleware keeps keys and revocation state in sync in the
background and puts the result in `request.state.aidr`:

```python
from aidr_verifier import AidrMiddleware, RelyingPartyConfig

app.add_middleware(AidrMiddleware, config=RelyingPartyConfig(
    issuer="https://api.evolivcore.com", public_origin="https://shop.example", min_agal=1))
```

Anonymous visitors pass as `anonymous`; a request that claims an identity and fails is refused.
An audience-bound credential is checked against the site being visited (or `public_origin`).
Or verify a request yourself with `AgentVerifier`. Apache-2.0.
