Metadata-Version: 2.4
Name: 1password-agent-broker
Version: 0.4.1
Summary: Let agents use approved 1Password-backed capabilities without receiving secret values
License-Expression: Apache-2.0
License-File: LICENSE
Author: Astrivant
Requires-Python: >=3.12,!=3.14.1,<4
Classifier: Development Status :: 3 - Alpha
Classifier: Intended Audience :: Developers
Classifier: Topic :: Security
Classifier: Programming Language :: Python :: 3
Requires-Dist: 1password-agent-broker-sdk (==0.4.1)
Requires-Dist: Flask (==3.1.3)
Requires-Dist: attrs (==26.1.0)
Requires-Dist: cattrs (==26.2.1)
Requires-Dist: cheroot (==11.1.2)
Requires-Dist: cryptography (==50.0.2)
Requires-Dist: jsonschema (==4.26.0)
Requires-Dist: mcp (==2.3.0)
Requires-Dist: onepassword-sdk (==0.4.1)
Requires-Dist: opentelemetry-api (==1.45.1)
Requires-Dist: prometheus-client (==0.26.0)
Requires-Dist: psycopg-pool (==3.3.3)
Requires-Dist: psycopg[binary] (==3.3.6)
Requires-Dist: pycasbin (==2.8.0)
Project-URL: Documentation, https://github.com/astrivant/1password-agent-broker/blob/main/docs/operations.md
Project-URL: Repository, https://github.com/astrivant/1password-agent-broker
Description-Content-Type: text/markdown

# 1Password Agent Broker

Run approved credential-backed capabilities without handing provider credentials
to an agent. This distribution owns the deployed service, its 1Password SDK
integration, durable ledger, CLI and MCP adapter.

<!-- toc -->

- [Install and verify](#install-and-verify)
- [Inputs](#inputs)
- [Development](#development)

<!-- /toc -->

## Install and verify

Requires Python 3.12 or newer, excluding 3.14.1.

```bash
python -m pip install 1password-agent-broker
agent-broker demo
```

The demo uses synthetic temporary services. See the
[project quick start](https://github.com/astrivant/1password-agent-broker#install-and-try-it)
for deployment and the
[client SDK](https://github.com/astrivant/1password-agent-broker/tree/main/pkg/python/broker_sdk)
for applications consuming the separately deployed key service.

## Inputs

| Input | Purpose |
| --- | --- |
| Policy and approval files | Operator-owned capabilities and current grants |
| TLS certificate, key and CA paths | Authenticate the broker and its callers |
| Ledger configuration | Durable request coordination through SQLite or PostgreSQL |
| Provider environment | Service-owned provider authentication |

The [operations guide](https://github.com/astrivant/1password-agent-broker/blob/main/docs/operations.md)
defines exact options, variables and authority boundaries. Credentials are never
part of the package or its demo inputs.

## Development

Both Python distributions live together under `pkg/python/`. Use the repository's
root Poetry environment and lockfile for development. The
[development guide](https://github.com/astrivant/1password-agent-broker/blob/main/docs/development.md)
covers builds, tests and signed publication.

