Auths Python SDK

Decentralized identity for developers and AI agents. Sign, verify, and manage cryptographic identities with Git-native storage.

Install

pip install auths

Quick start

from auths import Auths

auths = Auths()

# Verify an attestation
result = auths.verify(attestation_json=data, issuer_key=public_key_hex)
print(result.valid)  # True

# Sign bytes
signature = auths.sign(b"hello world", private_key=secret_key_hex)

Identity management

from auths import Auths

auths = Auths(repo_path="~/.auths")

# Create a cryptographic identity
identity = auths.identities.create(label="laptop")
print(identity.did)  # did:keri:EBfd...

# Provision an agent (for CI, MCP servers, etc.)
agent = auths.identities.provision_agent(
    identity.did,
    name="deploy-bot",
    capabilities=["sign"],
)

# Sign using the keychain-stored identity key
sig = auths.sign_as(b"hello world", identity=identity.did)

# Link and manage devices
device = auths.devices.link(identity_did=identity.did, capabilities=["sign"])
auths.devices.revoke(device.did, identity_did=identity.did, note="replaced")

Keyless service-to-service verify

Verify an agent's credential presentation offline against a pinned root — one call, a typed Status enum, no exception for a denial:

from auths import verify_presentation, PresentationStatus

report = verify_presentation(bundle_json)  # the Auths-Presentation request bundle
if report.status is not PresentationStatus.VALID:
    raise PermissionError(f"denied: {report.status}")  # WRONG_AUDIENCE, EXPIRED, …

print(report.subject, report.caps)  # granted holder + capabilities

verify_credential(bundle_json) returns a CredentialReport the same way — e.g. report.status is CredentialStatus.CREDENTIAL_REVOKED carries report.revoked_at. Malformed input returns a typed MALFORMED_REQUEST status; it never raises.

Git commit verification

from auths.git import verify_commit_range

result = verify_commit_range("HEAD~5..HEAD")
for commit in result.commits:
    print(f"{commit.commit_sha}: {'valid' if commit.is_valid else commit.error}")

Time-pinned verification

# Verify an attestation's authenticity at a historical point in time
result = auths.verify(attestation_json=data, issuer_key=key, at="2024-06-15T00:00:00Z")

Capability/role authority is no longer checked at verification time. A capability grant comes from a holder-verified ACDC credential, not the attestation.

Agent auth for MCP / AI frameworks

from auths.agent import AgentAuth

auth = AgentAuth(
    bridge_url="https://bridge.example.com",
    attestation_chain_path=".auths/agent-chain.json",
)
token = auth.get_token(capabilities=["read", "write"])

Error handling

from auths import Auths, VerificationError, NetworkError

auths = Auths()
try:
    result = auths.verify(attestation_json=data, issuer_key=key)
except VerificationError as e:
    print(e.code)     # "expired_attestation"
    print(e.message)  # "Attestation expired at 2024-01-15T..."
except NetworkError as e:
    if e.should_retry:
        pass  # safe to retry

All errors inherit from AuthsError and carry .code, .message, and .context.

Configuration

# Auto-discover (uses ~/.auths)
auths = Auths()

# Explicit repo path
auths = Auths(repo_path="/path/to/identity-repo")

# With passphrase (or set AUTHS_PASSPHRASE env var)
auths = Auths(passphrase="my-secret")

# Headless / CI mode
# Set AUTHS_KEYCHAIN_BACKEND=file for environments without a system keychain

API reference

Type stubs are bundled (py.typed + __init__.pyi). Your editor will show full signatures, docstrings, and return types for all methods.

License

Apache-2.0

Project links

Data verified by PyPI on Jul 21, 2026
Data provided by the project maintainers, verified at the time the release was uploaded to PyPI.

Key dates

PyPI data
Data sourced directly from PyPI's database.
  • Released:
Latest release

1 maintainer

PyPI data
Data sourced directly from PyPI's database.
Avatar for bordumb from gravatar.com bordumb

GitHub Statistics

Data verified by PyPI on Jul 21, 2026
The GitHub source repository was provided by the project maintainers and verified by PyPI at the time of upload. Stars, forks, and open issues/PRs are derived from that repository and have not been independently verified.

License

Apache Software License (Apache-2.0)

Requires

Python >=3.8

Provides Extra

jwt

Tags

identity cryptography did signing verification git keri

Classifiers

Report project as malware

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

auths-0.1.16.tar.gz (1.9 MB view details)

Uploaded Source

Built Distributions

If you're not sure about the file name format, learn more about wheel file names.

auths-0.1.16-cp38-abi3-win_amd64.whl (8.2 MB view details)

Uploaded CPython 3.8+Windows x86-64

auths-0.1.16-cp38-abi3-musllinux_1_2_x86_64.whl (8.4 MB view details)

Uploaded CPython 3.8+musllinux: musl 1.2+ x86-64

auths-0.1.16-cp38-abi3-musllinux_1_2_aarch64.whl (7.8 MB view details)

Uploaded CPython 3.8+musllinux: musl 1.2+ ARM64

auths-0.1.16-cp38-abi3-manylinux_2_28_x86_64.whl (8.4 MB view details)

Uploaded CPython 3.8+manylinux: glibc 2.28+ x86-64

auths-0.1.16-cp38-abi3-manylinux_2_28_aarch64.whl (7.8 MB view details)

Uploaded CPython 3.8+manylinux: glibc 2.28+ ARM64

auths-0.1.16-cp38-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl (15.0 MB view details)

Uploaded CPython 3.8+macOS 10.12+ universal2 (ARM64, x86-64)macOS 10.12+ x86-64macOS 11.0+ ARM64

File details

Details for the file auths-0.1.16.tar.gz.

File metadata

  • Download URL: auths-0.1.16.tar.gz
  • Upload date:
  • Size: 1.9 MB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.13

File hashes

Hashes for auths-0.1.16.tar.gz
Algorithm Hash digest
SHA256 cb33655c8d757d85b2ed6df0aa1cf997f88fb53d38e66cf284f85df162c0dd00
MD5 33218ddd1fe3d3421ab5bc5b12791d5a
BLAKE2b-256 11bb7fae311e7deb9948eea7e50482268329e24a34178689983260043d132c1c

See more details on using hashes here.

Provenance

The following attestation bundles were made for auths-0.1.16.tar.gz:

Publisher: publish-python.yml on auths-dev/auths

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file auths-0.1.16-cp38-abi3-win_amd64.whl.

File metadata

  • Download URL: auths-0.1.16-cp38-abi3-win_amd64.whl
  • Upload date:
  • Size: 8.2 MB
  • Tags: CPython 3.8+, Windows x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.13

File hashes

Hashes for auths-0.1.16-cp38-abi3-win_amd64.whl
Algorithm Hash digest
SHA256 3bec809ca4eddd7d9bcd6bca01a494de6f92786fdcc1f17cb4f962d7b642e818
MD5 8258676a32d40228c75eb8094e4fe322
BLAKE2b-256 118dda70b28ffddffb18ae35a2c2049c540b1dbc0a4bd15680cf1f28c87162bc

See more details on using hashes here.

Provenance

The following attestation bundles were made for auths-0.1.16-cp38-abi3-win_amd64.whl:

Publisher: publish-python.yml on auths-dev/auths

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file auths-0.1.16-cp38-abi3-musllinux_1_2_x86_64.whl.

File metadata

File hashes

Hashes for auths-0.1.16-cp38-abi3-musllinux_1_2_x86_64.whl
Algorithm Hash digest
SHA256 a8fdb346ced1217bf01a7be7827718d5607b595c28f5a533a12013c7bba8858c
MD5 dd4561aaf87e2a1a558bb3e145ec05d8
BLAKE2b-256 097a02cd1705247a469b0ed7e12104a87a34532493d47f08c54140947787660b

See more details on using hashes here.

Provenance

The following attestation bundles were made for auths-0.1.16-cp38-abi3-musllinux_1_2_x86_64.whl:

Publisher: publish-python.yml on auths-dev/auths

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file auths-0.1.16-cp38-abi3-musllinux_1_2_aarch64.whl.

File metadata

File hashes

Hashes for auths-0.1.16-cp38-abi3-musllinux_1_2_aarch64.whl
Algorithm Hash digest
SHA256 c9b86128abbfc0e080ad197f4693a95f3085b4374112d733c84cdf8fab6fd781
MD5 0e0de1c2eb6605893ee7f54a8b4a3367
BLAKE2b-256 83584b74aec526186745db399bb2cff06f3077828f19bb81b9c13354761d40af

See more details on using hashes here.

Provenance

The following attestation bundles were made for auths-0.1.16-cp38-abi3-musllinux_1_2_aarch64.whl:

Publisher: publish-python.yml on auths-dev/auths

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file auths-0.1.16-cp38-abi3-manylinux_2_28_x86_64.whl.

File metadata

File hashes

Hashes for auths-0.1.16-cp38-abi3-manylinux_2_28_x86_64.whl
Algorithm Hash digest
SHA256 c4d1e58b25816e15cb0ee41477d4c1782c7cadae7dbc573f85634cd16cd3300e
MD5 019410cc5e27d3c8723114b0a7db910d
BLAKE2b-256 7d6f5e3d493aec9234f088e6586a9e1d53f16c29ddc27739db93ce86a9767329

See more details on using hashes here.

Provenance

The following attestation bundles were made for auths-0.1.16-cp38-abi3-manylinux_2_28_x86_64.whl:

Publisher: publish-python.yml on auths-dev/auths

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file auths-0.1.16-cp38-abi3-manylinux_2_28_aarch64.whl.

File metadata

File hashes

Hashes for auths-0.1.16-cp38-abi3-manylinux_2_28_aarch64.whl
Algorithm Hash digest
SHA256 79ccb0ecd21e4c7737137665f6345fe24bdd6f55906b681d47d779afac4c9718
MD5 c2d2e2334d39bef31f7e0a7a7acc97bb
BLAKE2b-256 82b8a1372832619972e695fbfaa50aacdd11aff7dc53c6d987acf767e1174581

See more details on using hashes here.

Provenance

The following attestation bundles were made for auths-0.1.16-cp38-abi3-manylinux_2_28_aarch64.whl:

Publisher: publish-python.yml on auths-dev/auths

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file auths-0.1.16-cp38-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl.

File metadata

File hashes

Hashes for auths-0.1.16-cp38-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl
Algorithm Hash digest
SHA256 0c743a2303feb35f3ddd3c9e645772303b8a48db63d4d86f10625475a7bd0454
MD5 d1687ed031ba596030a87f13d1affe61
BLAKE2b-256 a75e142e43aa4e953558f7c2688e9fe8d93c9c99d366f60619fbe49f0ef377bf

See more details on using hashes here.

Provenance

The following attestation bundles were made for auths-0.1.16-cp38-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl:

Publisher: publish-python.yml on auths-dev/auths

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Release history Release notifications | RSS feed

This release

0.1.16 This release

7 files

0.1.13

7 files

0.1.12

7 files

0.1.11

7 files

0.1.10

7 files

0.1.9

7 files

0.1.8

7 files

0.1.7

7 files

0.1.6

7 files

0.1.5

7 files

0.1.3

7 files

0.1.2

7 files

0.1.1

7 files

0.1.0

5 files

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page