@openagentid/sdk is the reference TypeScript SDK. Verify-first for services, full façade when you need identity.
Published on npm under the @openagentid scope (not @openagent or @oas). Prefer the registry install below.

Verify an ACT

Verification runs in the canonical Rust crate compiled to WASM — signature before any claim check, temporal checks with leeway, scope non-widening. TypeScript carries zero format rules, so it cannot drift from the specification.

Guard a route

A missing, forged, expired, wrong-audience, or under-scoped token gets a 401 with the reason — the handler never runs.

Key custody

Everything derives deterministically from one 32-byte seed: the Ed25519 signing keypair and an X25519 encryption keypair, via the same BLAKE3 context-separated derivation as the Rust and Python SDKs.

The façade

No silent stubs. A missing protocol client fails closed with a ConfigError naming the package to install. Unit tests opt into fakes explicitly with @openagentid/sdk-testing: OpenAgent.configure(createTestingConfig()).

In the box

Conformance

The SDK passes the 13 canonical ACT vectors in CI against the canonical crate — the same vectors Rust, Python, Go, Swift, and Kotlin run. 97 tests.

Next