Metadata-Version: 2.4
Name: caracalai-identity
Version: 0.1.6rc3
Summary: Caracal JWT verification, JWKS cache, scope evaluation, and claim shapes
License-Expression: Apache-2.0
License-File: LICENSE
Requires-Python: >=3.12
Requires-Dist: caracalai-core==0.1.6rc3
Requires-Dist: httpx>=0.28.0
Requires-Dist: idna>=3.15
Requires-Dist: pyjwt[crypto]>=2.10.0
Description-Content-Type: text/markdown

# caracalai-identity

JWT verification, JWKS cache, scope evaluation, and claim shapes for Caracal-issued agent tokens.

Part of [Caracal](https://github.com/Garudex-Labs/caracal): the identity and authorization layer for AI agents - short-lived, policy-approved authority instead of credentials.

## Install

```bash
pip install caracalai-identity
```

## Production contract

Verified tokens must include `exp`, `iat`, `jti`, `sub`, `sid`, `client_id`, `zone_id`, and `use`. Configure expected issuer, audience, zone, required scopes, and required token use at the resource boundary.

Verification failures are authentication failures. Do not continue with anonymous identity state or partially trusted claims.

## Links

- Source: https://github.com/Garudex-Labs/caracal
- Docs: https://caracal.run/sdks/identity/
- License: Apache-2.0
