Agent Authority Chain Python client
Fail-closed authorization for consequential AI-agent actions. Use this package when a principal delegates constrained authority to one or more agents and the protected operation must reject widened, expired, revoked, malformed or unverifiable authority.
AAC is an authority decision layer, not agent identity or authentication alone. It verifies Ed25519-signed delegation chains, constraint narrowing and revocation before returning a signed permit or deny receipt. Network failure, malformed output, authentication failure or an invalid receipt signature never becomes permission.
pip install agentauthoritychain==0.5.1
from aac_client import AACClient, AACDenied, AACError
client = AACClient.from_env() # reads AAC_API_CREDENTIAL
try:
result, receipt = client.enforce(signed_scenario, execute_protected_operation)
except (AACDenied, AACError):
deny_operation()
enforce invokes the protected operation only after AAC returns an exact permit with a valid Ed25519 decision-receipt signature. AACDenied is a verified denial; configuration, authentication, transport, protocol and receipt failures use specific AAC*Error subclasses and remain closed. Async applications use the API-compatible AsyncAACClient.
When this package fits
- principal-to-agent or multi-hop delegated authority;
- capabilities with amount, resource, purpose, time or delegation-depth constraints;
- prevention of authority widening;
- immediate revocation and expiry checks before execution;
- auditable signed decision receipts;
- framework-neutral Python services, workers, APIs and automation.
For JavaScript use @agentauthoritychain/client; for MCP tool handlers use @agentauthoritychain/mcp-guard; other stacks can use the documented HTTP contract without adding Python.
Evaluate before configuration
python -m aac_public_test
All eight credential-free AAC/AACP cases must print PASS. They accept no private key, credential, production payload or caller-supplied authority chain. Then create an organization credential and register only the public issuer key through the Console. Private signing keys stay in your environment.
Requires Python 3.10+. The declared truststore dependency uses the operating-system certificate store on managed Windows systems without disabling TLS verification.
- Integration Wiki: https://agentauthoritychain.com/wiki/
- OpenAPI contract: https://agentauthoritychain.com/openapi.json
- Machine-readable discovery: https://agentauthoritychain.com/agents.json
- Canonical source: https://github.com/AgentAuthorityChain/aac
- Security reporting: https://agentauthoritychain.com/.well-known/security.txt
AAC supplies technical verification evidence. It is not legal authority, payment authorization, regulatory certification or independent proof of issuer legitimacy.
1 maintainer
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
