OpenAVT
TLS over voice. Built for agents.
OpenAVT (Open Agent Voice TLS) carries real mutual TLS 1.3 records through audio. An agent can authenticate its key and send a protected request during a voice call; the business checks its permission before returning a result.
- Transport: TLS requests and responses travel through audio-only WebRTC.
- Identity: AVA (Agent Voice Authority) enrolls, renews and revokes agent certificates.
- Permission: a separate business signer issues customer grants for specific actions and resources.
Try the complete demo
Requires Python 3.11+, uv and the openssl executable. No OpenAI key needed.
Install the released package from PyPI:
python -m pip install 'openavt[webrtc,authority]'
openavt delegation-demo
Or run from a GitHub checkout:
git clone https://github.com/ketanbj/openavt.git
cd openavt
uv run --locked --extra webrtc --extra authority openavt delegation-demo
The demo enrolls an agent, issues customer consent, and establishes a live local
audio call. It accepts one authorized request and rejects seven misuse cases,
including scope escalation, replay and revocation. It saves a report and audio
under output/.
To use two real OpenAI voice agents, copy .env.example to .env, set
OPENAI_API_KEY locally, then run:
uv run --locked --extra agents --extra authority openavt delegation-demo --agents
More demos and installation options →
Sub-second handshakes
Measured on an established local 64 kbps G.711 PCMU audio call:
| Run | Full mutual TLS handshake | Evidence |
|---|---|---|
main CI, 5 fresh calls, October 11, 2026 |
0.561 s median · 0.581 s max | Benchmark |
| Two OpenAI agents with AVA and customer delegation | 0.623 s | Demo results |
The timer includes both authenticated endpoints and the final audio ACK. It excludes certificate creation, call setup and LLM/speech time. The fast PCM profile requires an unchanged digital PCMU path; transcoding or audio processing can break it. Measurements and reproduction →
Scope
This is an experimental local prototype. Both peers run on one machine; public Internet, carrier/PSTN and microphone paths have not been verified. Ordinary speech is outside the inner TLS session. There is no WebRTC data channel carrying the protected requests.
Certificates prove registered account/key control. Customer authentication uses demo credentials; provider verification, real customer login and production CA operations remain future work. The backend enforces grants outside the LLM. Trust boundaries →
Documentation
| Goal | Guide |
|---|---|
| Install and choose a demo | Quickstart |
| Understand certificates and customer consent | Authority and delegation |
| Run a persistent authority | AVA CLI walkthrough |
| Integrate the transport | Architecture and library usage |
| Reproduce the timings | Performance |
| Inspect tests and evidence | Verification |
| Build and publish the package | Releasing |
1 maintainer
Metadata
1 maintainer
Release files for openavt 0.1.1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| openavt-0.1.1.tar.gz | 189.9 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| openavt-0.1.1-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 243.8 kB
Release files / openavt-0.1.1.tar.gz
| Download URL | openavt-0.1.1.tar.gz |
|---|---|
| Size | 189.9 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
851bdb87b4b170fd3014537d15cca403d8e555102493d843f5b8a693db143b81
|
|
BLAKE2b-256 checksum How to use checksums |
ba50f8f83e26cded1399691f9d3b079f0f869c1e956e9ce8f0c6a78cc71c927d
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 12, 2026.
Transparency logRelease files / openavt-0.1.1-py3-none-any.whl
| Download URL | openavt-0.1.1-py3-none-any.whl |
|---|---|
| Size | 53.9 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
cae8a9b47478293dbef1ea110d57bb43a503a077ee2588234f0932c967f94e63
|
|
BLAKE2b-256 checksum How to use checksums |
82b61ff326528f2449a298ef78242ea510bf5778e343e1f3349a9266b20d7866
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 12, 2026.
Transparency log
