AgentOath A2A Bridge

AgentOath trust protocol extension for the Google A2A (Agent-to-Agent) protocol.

Embeds verifiable identity, trust scores, and signed receipts into A2A agent communication, adding cryptographic trust to inter-agent interactions.

Features

• Agent Card Extension -- Add AgentOath identity (DID, public key, trust score) to A2A Agent Cards
• Task Handler -- Automatically sign trust receipts when A2A tasks complete or fail
• Trust Headers -- Sign and verify HTTP headers for A2A requests
• ASGI Middleware -- Drop-in middleware for A2A servers (FastAPI, Starlette, etc.)

Quick Start

pip install agentoath-a2a

Extend your Agent Card

from agentoath import TrustAgent
from agentoath_a2a import AgentCardExtension

agent = TrustAgent.load("my_agent.json")
ext = AgentCardExtension(agent)

card = {
    "name": "My Agent",
    "description": "An AI assistant",
    "url": "https://myagent.example.com",
}
card = ext.extend_agent_card(card)
# card now has extensions.agentoath with DID, public_key, trust_score

Automatic receipts on task completion

from agentoath_a2a import TrustTaskHandler

handler = TrustTaskHandler(agent)

# When an A2A task completes:
receipt = handler.on_task_completed(task, remote_agent_did="did:trust:agent:...", rating=8)

Trust headers for HTTP requests

from agentoath_a2a import TrustHeaderSigner, TrustHeaderVerifier

# Sign outgoing request
signer = TrustHeaderSigner(agent)
headers = signer.sign_headers(method="POST", path="/tasks/send")

# Verify incoming request
verifier = TrustHeaderVerifier()
result = verifier.verify_headers(headers, "POST", "/tasks/send", public_key=remote_agent.public_key)

ASGI Middleware

from agentoath_a2a import AgentOathA2AMiddleware

app = AgentOathA2AMiddleware(app, agent=agent, known_agents={...})

Development

pip install -e ".[dev]"
pytest

License

Apache-2.0