Agent Authorization Python Packages

attenu-guard

Permissions that narrow when one AI agent delegates: a sub-agent never holds more than its parent. In-process, with a hash-chained audit log you verify offline. Python and TypeScript, adapters for 19 frameworks and A2A.

agent-sudo-mcp

Authorization, delegation, provenance, and verifiable-audit engine for AI agents. MCP adapter published.

aiyoplane-crewai

AEAP Composition Boundary Adapter for CrewAI. Thin wrapper that attaches the AEAP Runtime Decision Point to CrewAI tool invocations by any crew member. Published as aiyoplane-crewai on PyPI.

decern

Deterministic authorization + tamper-evident audit for AI agents, humans, and workloads — one principal type, safety invariants machine-checked by an SMT solver (cvc5), every decision independently verifiable offline. Pure Rust.

attenu-derive

Attenu Derive: computes the permission set each AI agent task needs from the app itself — roster, tools, observed calls — for attenu-guard to enforce on every tool call and sub-agent handoff.

aiyoplane-microsoft-agent-framework

AEAP Composition Boundary Adapter for the Microsoft Agent Framework (Python). Thin wrapper that attaches the AEAP Runtime Decision Point to agent middleware and workflow execution. Published as aiyoplane-microsoft-agent-framework on PyPI.

aiyoplane-langchain

AEAP Composition Boundary Adapter for LangChain (Python). Thin wrapper that attaches the AEAP Runtime Decision Point to LangChain tool invocations. Published as aiyoplane-langchain on PyPI.

draco-toolkit

Draco-Tech is the identity and authorization layer that lets autonomous agents operate with zero static credentials and full policy adherence.

web4-core

Web4: an open standard for verifiable AI presence — LCT identity, T3/V3 trust tensors, MRH context, ATP/ADP. Rust + Python SDKs on crates.io/PyPI. AGPL-3.0-or-later.

web4-trust

Web4: an open standard for verifiable AI presence — LCT identity, T3/V3 trust tensors, MRH context, ATP/ADP. Rust + Python SDKs on crates.io/PyPI. AGPL-3.0-or-later.

hardbound

Hestia — universal Web4 presence for humans and AI. Local-first cryptographic identity, encrypted vault, delegation authority, witnessed trust record, and device constellation. Cross-platform app + AI plugin + CLI. EUDI-compatible credential issuance. AGPL-3.0.

web4-sdk

Web4: an open standard for verifiable AI presence — LCT identity, T3/V3 trust tensors, MRH context, ATP/ADP. Rust + Python SDKs on crates.io/PyPI. AGPL-3.0-or-later.

veto-sdk

The authorization kernel for AI agents. Block, allow, or escalate agent tool calls with YAML rules — deterministic-first, LLM fallback.