What the server does
1
Exposes auth endpoints
POST /.well-known/openagent/auth and /.well-known/openagent/auth/prove implement the OAAP handshake.2
Verifies agents
Runs the AEGIS 7-step verification pipeline: DID resolve, schema check, signature, revocation, lineage walk, liveness, conformance.
3
Enforces policies
Checks scopes, rate limits, delegation constraints, skills policy.
4
Provides context
Every handler receives a typed
AuthenticatedContext with peer DID, conformance level, and session key.Minimal middleware
Middleware
Axum, Express, Hono integrations.
Verification
The 7-step pipeline.
Policies
Scopes, delegation, skills.