Auths Python SDK

Decentralized identity for developers and AI agents. Sign, verify, and manage cryptographic identities with Git-native storage.

Install

pip install auths

Quick start

from auths import Auths

auths = Auths()

# Verify an attestation
result = auths.verify(attestation_json=data, issuer_key=public_key_hex)
print(result.valid)  # True

# Sign bytes
signature = auths.sign(b"hello world", private_key=secret_key_hex)

Identity management

from auths import Auths

auths = Auths(repo_path="~/.auths")

# Create a cryptographic identity
identity = auths.identities.create(label="laptop")
print(identity.did)  # did:keri:EBfd...

# Provision an agent (for CI, MCP servers, etc.)
agent = auths.identities.provision_agent(
    identity.did,
    name="deploy-bot",
    capabilities=["sign"],
)

# Sign using the keychain-stored identity key
sig = auths.sign_as(b"hello world", identity=identity.did)

# Link and manage devices
device = auths.devices.link(identity_did=identity.did, capabilities=["sign"])
auths.devices.revoke(device.did, identity_did=identity.did, note="replaced")

Keyless service-to-service verify

Verify an agent's credential presentation offline against a pinned root — one call, a typed Status enum, no exception for a denial:

from auths import verify_presentation, PresentationStatus

report = verify_presentation(bundle_json)  # the Auths-Presentation request bundle
if report.status is not PresentationStatus.VALID:
    raise PermissionError(f"denied: {report.status}")  # WRONG_AUDIENCE, EXPIRED, …

print(report.subject, report.caps)  # granted holder + capabilities

verify_credential(bundle_json) returns a CredentialReport the same way — e.g. report.status is CredentialStatus.CREDENTIAL_REVOKED carries report.revoked_at. Malformed input returns a typed MALFORMED_REQUEST status; it never raises.

Git commit verification

from auths.git import verify_commit_range

result = verify_commit_range("HEAD~5..HEAD")
for commit in result.commits:
    print(f"{commit.commit_sha}: {'valid' if commit.is_valid else commit.error}")

Time-pinned verification

# Verify an attestation's authenticity at a historical point in time
result = auths.verify(attestation_json=data, issuer_key=key, at="2024-06-15T00:00:00Z")

Capability/role authority is no longer checked at verification time. A capability grant comes from a holder-verified ACDC credential, not the attestation.

Agent auth for MCP / AI frameworks

from auths.agent import AgentAuth

auth = AgentAuth(
    bridge_url="https://bridge.example.com",
    attestation_chain_path=".auths/agent-chain.json",
)
token = auth.get_token(capabilities=["read", "write"])

Error handling

from auths import Auths, VerificationError, NetworkError

auths = Auths()
try:
    result = auths.verify(attestation_json=data, issuer_key=key)
except VerificationError as e:
    print(e.code)     # "expired_attestation"
    print(e.message)  # "Attestation expired at 2024-01-15T..."
except NetworkError as e:
    if e.should_retry:
        pass  # safe to retry

All errors inherit from AuthsError and carry .code, .message, and .context.

Configuration

# Auto-discover (uses ~/.auths)
auths = Auths()

# Explicit repo path
auths = Auths(repo_path="/path/to/identity-repo")

# With passphrase (or set AUTHS_PASSPHRASE env var)
auths = Auths(passphrase="my-secret")

# Headless / CI mode
# Set AUTHS_KEYCHAIN_BACKEND=file for environments without a system keychain

API reference

Type stubs are bundled (py.typed + __init__.pyi). Your editor will show full signatures, docstrings, and return types for all methods.

License

Apache-2.0

Project links

Data verified by PyPI on Jul 18, 2026
Data provided by the project maintainers, verified at the time the release was uploaded to PyPI.

Key dates

PyPI data
Data sourced directly from PyPI's database.
  • Released:
Newer release available (0.1.16)

1 maintainer

PyPI data
Data sourced directly from PyPI's database.
Avatar for bordumb from gravatar.com bordumb

GitHub Statistics

Data verified by PyPI on Jul 18, 2026
The GitHub source repository was provided by the project maintainers and verified by PyPI at the time of upload. Stars, forks, and open issues/PRs are derived from that repository and have not been independently verified.

License

Apache Software License (Apache-2.0)

Requires

Python >=3.8

Provides Extra

jwt

Tags

identity cryptography did signing verification git keri

Classifiers

Report project as malware

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

auths-0.1.8.tar.gz (1.7 MB view details)

Uploaded Source

Built Distributions

If you're not sure about the file name format, learn more about wheel file names.

auths-0.1.8-cp38-abi3-win_amd64.whl (7.6 MB view details)

Uploaded CPython 3.8+Windows x86-64

auths-0.1.8-cp38-abi3-musllinux_1_2_x86_64.whl (7.8 MB view details)

Uploaded CPython 3.8+musllinux: musl 1.2+ x86-64

auths-0.1.8-cp38-abi3-musllinux_1_2_aarch64.whl (7.3 MB view details)

Uploaded CPython 3.8+musllinux: musl 1.2+ ARM64

auths-0.1.8-cp38-abi3-manylinux_2_28_x86_64.whl (7.8 MB view details)

Uploaded CPython 3.8+manylinux: glibc 2.28+ x86-64

auths-0.1.8-cp38-abi3-manylinux_2_28_aarch64.whl (7.3 MB view details)

Uploaded CPython 3.8+manylinux: glibc 2.28+ ARM64

auths-0.1.8-cp38-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl (14.0 MB view details)

Uploaded CPython 3.8+macOS 10.12+ universal2 (ARM64, x86-64)macOS 10.12+ x86-64macOS 11.0+ ARM64

File details

Details for the file auths-0.1.8.tar.gz.

File metadata

  • Download URL: auths-0.1.8.tar.gz
  • Upload date:
  • Size: 1.7 MB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.13

File hashes

Hashes for auths-0.1.8.tar.gz
Algorithm Hash digest
SHA256 7508e936af0a454f3e557483975eee7cc2c1f11a1b46869839b56e3248979206
MD5 284cec73b49cc6b576b6cd9cf5c5a170
BLAKE2b-256 8a6cb56fc71ff0a3fc1466ecf257ec7d8e86bb47f30a246b16dff10b04782063

See more details on using hashes here.

Provenance

The following attestation bundles were made for auths-0.1.8.tar.gz:

Publisher: publish-python.yml on auths-dev/auths

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file auths-0.1.8-cp38-abi3-win_amd64.whl.

File metadata

  • Download URL: auths-0.1.8-cp38-abi3-win_amd64.whl
  • Upload date:
  • Size: 7.6 MB
  • Tags: CPython 3.8+, Windows x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.13

File hashes

Hashes for auths-0.1.8-cp38-abi3-win_amd64.whl
Algorithm Hash digest
SHA256 58ebc1b3083429e9fba294940198d8707ed068ead27c6de2aad526dfc2c51523
MD5 e7ec8d1c546cee4289173d35b5234150
BLAKE2b-256 9383aff93e2e4688fecab0a5477eb0b1faf7f208266fd4fdadeca3a951cfc113

See more details on using hashes here.

Provenance

The following attestation bundles were made for auths-0.1.8-cp38-abi3-win_amd64.whl:

Publisher: publish-python.yml on auths-dev/auths

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file auths-0.1.8-cp38-abi3-musllinux_1_2_x86_64.whl.

File metadata

  • Download URL: auths-0.1.8-cp38-abi3-musllinux_1_2_x86_64.whl
  • Upload date:
  • Size: 7.8 MB
  • Tags: CPython 3.8+, musllinux: musl 1.2+ x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.13

File hashes

Hashes for auths-0.1.8-cp38-abi3-musllinux_1_2_x86_64.whl
Algorithm Hash digest
SHA256 ada929f4b249e93d17498366f7eb6688ff9dbf1c1c484c20e9d1fff2c2ba28b4
MD5 672452b71e14f275cc782ba5a3794756
BLAKE2b-256 a15ac121d3c140a209167de0c8ac53a3b04e7f1e0e77905eb45ffc704640082f

See more details on using hashes here.

Provenance

The following attestation bundles were made for auths-0.1.8-cp38-abi3-musllinux_1_2_x86_64.whl:

Publisher: publish-python.yml on auths-dev/auths

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file auths-0.1.8-cp38-abi3-musllinux_1_2_aarch64.whl.

File metadata

File hashes

Hashes for auths-0.1.8-cp38-abi3-musllinux_1_2_aarch64.whl
Algorithm Hash digest
SHA256 a3b39089a6cd2c2cf8bae3365da967860b0cedd32ebe4503f6f11ad44e203bd4
MD5 25e74fd49d118314550117c2681da81d
BLAKE2b-256 9700683e19845aeb200aed9d74f0368e17586806e1b0e827c3525140835c425d

See more details on using hashes here.

Provenance

The following attestation bundles were made for auths-0.1.8-cp38-abi3-musllinux_1_2_aarch64.whl:

Publisher: publish-python.yml on auths-dev/auths

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file auths-0.1.8-cp38-abi3-manylinux_2_28_x86_64.whl.

File metadata

File hashes

Hashes for auths-0.1.8-cp38-abi3-manylinux_2_28_x86_64.whl
Algorithm Hash digest
SHA256 7b6d86ffb50a92401a1e70334351c117bfefe37f115f9ca8f7007c6c588235ca
MD5 f9fdde0170aeceaedb4d4f45b269cbc7
BLAKE2b-256 60e96d549f4cefc236e03dfee128db3eae2b14f12fd4535743ecdcbab742afe6

See more details on using hashes here.

Provenance

The following attestation bundles were made for auths-0.1.8-cp38-abi3-manylinux_2_28_x86_64.whl:

Publisher: publish-python.yml on auths-dev/auths

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file auths-0.1.8-cp38-abi3-manylinux_2_28_aarch64.whl.

File metadata

File hashes

Hashes for auths-0.1.8-cp38-abi3-manylinux_2_28_aarch64.whl
Algorithm Hash digest
SHA256 a3cd71721fec963c587cda5864c008a3ef40c87e783359b506500240018332f9
MD5 4f05cea8cdcdc1c51ea8f3de6dc62cbf
BLAKE2b-256 42979d5e37e1d5bca8aa8d79b18109dc2e95915ae1c1cca83343c34c84c9f6a5

See more details on using hashes here.

Provenance

The following attestation bundles were made for auths-0.1.8-cp38-abi3-manylinux_2_28_aarch64.whl:

Publisher: publish-python.yml on auths-dev/auths

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file auths-0.1.8-cp38-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl.

File metadata

File hashes

Hashes for auths-0.1.8-cp38-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl
Algorithm Hash digest
SHA256 1faadafa8ef12c8588fb764e0ca9563c5cd51a5ede98ced38445af85fe243f4e
MD5 c642f1da33cb22c4665c1a74df87280e
BLAKE2b-256 6497566c6968af856cc9b33bc470fa44c6bc5eb469fb32582d26209c68d1f4b1

See more details on using hashes here.

Provenance

The following attestation bundles were made for auths-0.1.8-cp38-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl:

Publisher: publish-python.yml on auths-dev/auths

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Release history Release notifications | RSS feed

0.1.16

7 files

0.1.13

7 files

0.1.12

7 files

0.1.11

7 files

0.1.10

7 files

0.1.9

7 files

This release

0.1.8 This release

7 files

0.1.7

7 files

0.1.6

7 files

0.1.5

7 files

0.1.3

7 files

0.1.2

7 files

0.1.1

7 files

0.1.0

5 files

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page