Agent Nebula SecureAgent

Build standards-based A2A agents with business skills in Python and protocol, security, and presentation defined through configuration.

Getting started · Configuration · Architecture · Security · A2UI · Agent Nebula · Examples

agent-nebula-secureagent is the lightweight developer-facing facade over agent-nebula-platform. It uses the official A2A Python SDK through Platform rather than reimplementing A2A. A2UI is optional. An agent can run standalone without registering with Agent Nebula.

Why SecureAgent?

Working directly with an A2A server requires assembling protocol handlers, Agent Card metadata, transport hosting, security integration, and lifecycle behavior around application logic. SecureAgent delegates those infrastructure responsibilities to Platform. Developers concentrate on skills while configuring published capabilities and security separately. This reduces duplicated infrastructure code; it does not remove the need to design and test business logic or access policies.

Architecture

Business skills (Python) + configuration + optional A2UI presentation
                            |
                            v
                 agent-nebula-secureagent
                 (public application facade)
                            |
                            v
                  agent-nebula-platform
            (A2A/A2UI composition, security, lifecycle)
                   /                   \
          official a2a-sdk       agent-nebula-sdk
                                (security primitives)
                            |
                optional Agent Nebula services
            (Registry, discovery, OAuth, policy)

See architecture and component boundaries. A2A is implemented through the official SDK; REST and MCP are not currently exposed as working SecureAgent server adapters (details).

Quick start

Requires Python 3.12 and Agent Nebula Platform 5.x (which supplies the Agent Nebula SDK dependency). Install the released package and its declared dependencies:

python3.12 -m venv .venv
. .venv/bin/activate
python -m pip install agent-nebula-secureagent

An A2A server defines its published skills in a2aserver.conf and binds executable handlers to those identifiers:

from agent_nebula_secureagent import SecureAgent

agent = SecureAgent(config="config/secureagent.conf")
agent.use_protocol("a2a", role="server", config="config/a2aserver.conf")

@agent.skill("inventory.lookup", description="Look up inventory")
async def inventory_lookup(payload):
    return {"sku": payload["sku"], "available": 12}

agent.run()

This snippet illustrates the API; it requires valid configuration files. Follow the complete getting-started guide and the runnable examples for complete configurations and server/client commands.

Configuration-driven development

The configuration formats, supported keys, and ownership boundaries are documented in the configuration reference. A2UI presentation remains separate from Python business logic (A2UI guide).

Authentication and authorization

SecureAgent does not implement a competing authentication stack. Platform interprets A2A security declarations and composes enforcement; agent-nebula-sdk supplies reusable security primitives. Configuration determines which mechanisms are enabled. A trust bundle alone does not enable mTLS, and declaring an OAuth scope does not by itself establish a hosted policy decision. See security and authorization.

Agent Nebula Enterprise Registry Hub (optional)

Agent Nebula provides hosted A2A Registry and discovery, Explorer, Playground, OAuth, policy, and account-management services. Its organizational model is Publisher → Provider → Agents. Developers can register publicly reachable agents and test OAuth-scoped, policy-controlled invocation; local standalone examples do not require these services.

Start with Agent Nebula integration, then follow the platform-integrated examples for onboarding, registration, and invocation scenarios.

Documentation

• Getting started · Public API · Skills
• Architecture · A2A · A2UI
• Configuration reference · Security
• Agent Nebula services and integration · REST/MCP status
• A2A Schema Contract extension

License

Licensed under the Apache License, Version 2.0. See CONTRIBUTING.md for contribution guidance.