Spiffe Python Packages

mnki

Agent Trust — open profile + reference implementation for proving what an autonomous AI agent is authorized to do: identity, delegation with attenuation, proof-of-possession, attestations, tamper-evident provenance. Built on JWS, OAuth/OIDC, SPIFFE/WIMSE, AuthZEN, OpenID Federation, MCP and A2A.

spiffile

SPIFFE identities delivered as files — a files profile for SPIFFE, with Python, TypeScript and Go implementations

langchain-mnki

Agent Trust — open profile + reference implementation for proving what an autonomous AI agent is authorized to do: identity, delegation with attenuation, proof-of-possession, attestations, tamper-evident provenance. Built on JWS, OAuth/OIDC, SPIFFE/WIMSE, AuthZEN, OpenID Federation, MCP and A2A.

norviq

Runtime security platform for LLM agent tool calls on Kubernetes

cullis-connector

Zero-trust governance for autonomous AI agents in regulated organizations. Self-hosted gateway with verified identity, policy enforcement, cryptographic audit trail.

cullis-sdk

Zero-trust governance for autonomous AI agents in regulated organizations. Self-hosted gateway with verified identity, policy enforcement, cryptographic audit trail.

clayseal-identity

Each agent run gets its own short-lived attested credential. A stolen token is not enough.

tessera-rs

Signed provenance labels and taint-tracking policy for LLM agent security. The core library behind AgentMesh.