Stack map
| Layer | Answers | Primary surface |
|---|---|---|
| OpenAgent SDK | How do I create, authenticate, and govern an agent in app code? | @openagent/sdk, openagent-sdk |
| OAS | Who is this entity, and what lineage authority can be proven? | did:oas:*, OAS verifier |
| Arsenal | What can this agent do, and how are credentials brokered safely? | ACTs, broker, scope grammar |
| AEGIS | Is this request allowed right now? | Verification result, policy engine |
| L1feID | Which stable platform record owns these DIDs? | DID to l1fe_id provisioning |
| Auth Protocol | How does an external agent prove key possession? | Authorization: OpenAgent ... |
| Wallet Derivation | Which wallets belong to this identity? | DID-derived Sigil, Solana, EVM addresses |
| Skills Policy | Which declared skills may the agent invoke? | SKILLS.md policy engine |
| Conformance | How do implementations prove compatibility? | JSON vectors and runners |
Developer path
Create an agent
Call
OpenAgent.createAgent in TypeScript or OpenAgent::create_agent in Rust. The SDK mints an OAS identity, binds it to a parent DID, and prepares scoped authority.Authenticate inbound calls
Call
OpenAgent.authenticate(request) or the framework middleware. The verifier checks the OpenAgent token or signature, then returns a typed context.Broker credentials
Call
agent.credentialsFor("openai"). Arsenal keeps the real provider secret in the broker and returns a fetch-shaped handle to the agent.Apply policy
AEGIS evaluates trust tier, revocation, lineage, spending, time windows, approvals, and route policy before privileged actions proceed.
Current launch posture
The current public SDK facade is Rust and TypeScript at
0.1.0. Other language SDK material from older OAS-only pages is not the current launch surface unless explicitly marked as future or adapter work.What to read next
OAS identity
DID format, entity kinds, lineage, and Sigil-backed authority.
Arsenal
ACTs, route capability grants, credential broker, and audit.
AEGIS
Verification result shape, trust tiers, revocation, and policy checks.
Quickstart
Use the public SDK facade in TypeScript or Rust.