caracalai-verify 0.2.0rc1

Framework-neutral mandate verification for Caracal-issued JWTs

caracalai-verify

Transport-neutral MCP authentication for Caracal-issued JWTs.

Part of Caracal: the identity and authorization layer for AI agents - short-lived, policy-approved authority instead of credentials.

Install

pip install caracalai-verify

Verify a mandate

from caracalai_revocation import InMemoryRevocationStore
from caracalai_verify import AuthOptions, create_mandate_verifier

verifier = create_mandate_verifier(
    AuthOptions(
        issuer="https://sts.example.com",
        audience="https://api.example.com",
        expected_zone_id="zone_prod",
        revocations=InMemoryRevocationStore(),
    )
)

result = await verifier.authorization(
    request.headers.get("authorization"),
    required_scopes=["tickets:read"],
    required_targets=["https://api.example.com/tickets"],
)

Links

• Source: https://github.com/Garudex-Labs/caracal
• Docs: https://caracal.run/sdks/verify/
• License: Apache-2.0