OpenAgent ID is the developer-facing facade for agent identity. The public SDK presents a small API, but underneath it are several independently useful protocol layers.
OpenAgent mascot head

The application imports one SDK. The runtime composes OAS, Arsenal, AEGIS, L1feID, skills policy, wallet derivation, and conformance fixtures.

​
Stack map

​
Developer path

1

Create an agent

Call OpenAgent.createAgent in TypeScript or OpenAgent::create_agent in Rust. The SDK mints an OAS identity, binds it to a parent DID, and prepares scoped authority.
2

Authenticate inbound calls

Call OpenAgent.authenticate(request) or the framework middleware. The verifier checks the OpenAgent token or signature, then returns a typed context.
3

Broker credentials

Call agent.credentialsFor("openai"). Arsenal keeps the real provider secret in the broker and returns a fetch-shaped handle to the agent.
4

Apply policy

AEGIS evaluates trust tier, revocation, lineage, spending, time windows, approvals, and route policy before privileged actions proceed.
5

Audit and verify

ACT issuance, brokered credential use, skills policy decisions, and conformance behavior are logged with stable machine-readable outcomes.

​
Current launch posture

The SDK ships in six languages (TypeScript, Rust, Python, Go, Swift, Kotlin), all at 0.1.0 in private preview. Every language passes the same 13 canonical ACT conformance vectors in CI.

OAS identity

DID format, entity kinds, lineage, and anchored authority.

Arsenal

ACTs, route capability grants, credential broker, and audit.

AEGIS

Verification result shape, trust tiers, revocation, and policy checks.

Quickstart

Use the public SDK facade in TypeScript or Rust.