OpenAgent is designed to run where agent products already run: backend services, edge middleware, workers, and Rust APIs.

Public SDK runtimes

Deployment examples in the SDK repo

Framework shape

All adapters do the same thing:
  1. run OpenAgent.authenticate(request),
  2. attach the verified context to request state,
  3. short-circuit failures with stable OpenAgent error codes,
  4. let handlers enforce route-specific scopes,
  5. call Arsenal for brokered credentials only when needed.

Minimal TypeScript handler