oneid-sdk
Python SDK for 1id.com -- hardware-anchored identity for AI agents.
RFC: draft-drake-email-hardware-attestation-00
Quick start
import oneid
# Enroll at declared tier (no HSM needed, always works)
identity = oneid.enroll(request_tier="declared", display_name="Sparky")
print(f"Enrolled: {identity.handle}")
print(f"URN: {identity.agent_identity_urn}")
# Get an OAuth2 token for API access
token = oneid.get_token()
headers = {"Authorization": f"Bearer {token.access_token}"}
# Check identity
me = oneid.whoami()
print(f"I am {me.handle}, trust tier: {me.trust_tier.value}")
Hardware-backed enrollment
# TPM enrollment (sovereign tier) - requires Windows/Linux with TPM 2.0
identity = oneid.enroll(request_tier="sovereign")
# YubiKey enrollment (portable tier) - requires YubiKey 5 inserted
identity = oneid.enroll(request_tier="portable")
# Virtual TPM (VMware/Hyper-V/QEMU)
identity = oneid.enroll(request_tier="virtual")
Trust tiers
| Tier | Hardware | Sybil Resistant | Trust Level |
|---|---|---|---|
sovereign |
TPM (Intel, AMD, Infineon) with valid cert | Yes | Highest |
portable |
YubiKey / Nitrokey / Feitian with PIV attestation | Yes | High |
virtual |
VMware / Hyper-V / QEMU vTPM | No | Verified Hardware |
declared |
None (software keys) | No | Software |
request_tier is a requirement, not a preference. You get exactly what you ask for, or an exception. No silent fallbacks.
Key algorithms
Like SSH, agents can choose their preferred key algorithm for declared-tier enrollment:
identity = oneid.enroll(request_tier="declared", key_algorithm="ed25519") # default, strongest
identity = oneid.enroll(request_tier="declared", key_algorithm="ecdsa-p384") # NIST P-384
identity = oneid.enroll(request_tier="declared", key_algorithm="rsa-4096") # RSA compat
Installation
pip install oneid
Requires Python 3.10+.
License
Apache-2.0
1 maintainer
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file oneid-2.0.0.tar.gz.
File metadata
- Download URL: oneid-2.0.0.tar.gz
- Upload date:
- Size: 113.0 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via:
twine/6.1.0 CPython/3.8.10
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
cc6d264835fb1f56abba01a084d6508a0b0fda7d22a860eb38a1b7eb7a5362ad
|
|
| MD5 |
d76c3486ebfc559414064f285ec74684
|
|
| BLAKE2b-256 |
6542da1cffa3445db42788656f245b0fb55420d0f6663bb16a14096b6d5a1aa2
|
File details
Details for the file oneid-2.0.0-py3-none-any.whl.
File metadata
- Download URL: oneid-2.0.0-py3-none-any.whl
- Upload date:
- Size: 89.9 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via:
twine/6.1.0 CPython/3.8.10
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
6960426c980ebcca0953f5561648f4ba44134e84bdddcaa57c61c642db564844
|
|
| MD5 |
0ce281e98a1abc07a68abc793e66cc51
|
|
| BLAKE2b-256 |
e550064d5e8e5d3957e7afddb86c1094c4abe18dc334e493e1ae435aaa0c79ab
|
