AgentIndex icon
AgentIndex
ToolsMCP ServersHOTCategoriesTrendingNewBest ListsCompareGuides
Submit Tool
ToolsMCP ServersHOTCategoriesTrendingNewBest ListsCompareGuides
Home/
Security & Safety/
attestix
attestix logo

attestix

Active·★ 846·Apache-2.0·Updated 2026-10-22
★ Trending

Attestix is attestation infrastructure for AI agents: DID-based identity, W3C Verifiable Credentials, an EU AI Act compliance layer, delegation chains and reputation scoring. The README frames it around the EU AI Act enforcement date of 2 August 2026 and argues that existing compliance tools are organisational dashboards that do not produce machine-readable, cryptographically verifiable proof an agent can present to another agent or a regulator.

It is organised into nine modules that together expose 47 MCP tools: Identity (unified agent identity tokens bridging MCP OAuth, A2A, DIDs and API keys, with GDPR Article 17 erasure), Agent Cards, DID (did:key and did:web), Delegation (UCAN-style capability tokens signed with EdDSA), Reputation (recency-weighted trust scores from 0 to 1), Compliance (risk profiles and conformity assessment) and further modules for credentials and the audit trail. It installs with pip install attestix and offers a CLI, a REST API with Swagger docs and a Streamlit web dashboard.

This write-up is based on the project's README and public repository data. We have not hand-tested the tool. Data as of 2026-10-17.

License
Apache-2.0
Latest release
v0.4.3 · 2026-10-12
Last commit
2026-10-15
Contributors
3
Forks
87
Open issues and PRs
19
First published
2026-02-16
PyPI package
attestix 0.4.3 · 360 downloads last week

Source: GitHub, npm and PyPI public APIs.

#agent-identity#ai-agents#attestation#blockchain#compliance#delegation#did#ed25519
$ Install
$ pip install attestix
↗ Visit site★ GitHub
01

Features

01Unified Agent Identity (UAITs) bridging multiple identity protocols
02EU AI Act compliance automation with risk profiles and assessments
03W3C Verifiable Credentials with Ed25519 signatures
04Hash-chained audit trail for provenance and accountability
05Blockchain anchoring on Base L2 via Ethereum Attestation Service
02

Why choose it

+Combines agent identity, verifiable credentials, delegation and compliance in one toolkit with 47 MCP tools.
+Uses open standards: W3C DIDs and Verifiable Credentials, UCAN-style delegation and A2A-compatible agent cards.
+Offers several interfaces: MCP tools, a CLI, a REST API with Swagger docs and a web dashboard.
+Hash-chained audit trail and signed credentials give verifiable records rather than just reports.
03

Trade-offs

!The README's compliance framing is built around the EU AI Act, and a tool cannot by itself make a system legally compliant; legal review is still needed.
!The comparison with other compliance products is the project's own claim.
!It is a large surface area (nine modules, 47 tools) for teams that only need one piece such as identity.
04

Maintenance check

ActiveChecked: 2026-10-19
Last commit
2026-10-12
Commits, last 90 days
10
Releases, last 90 days
2
Latest release
v0.4.3 (2026-10-12)
Open issues
20
Recent issues with at least one comment
0/1
Commits per week, last 12 weeks
Commits per week, last 12 weeks: 0, 0, 0, 2, 0, 0, 0, 0, 0, 0, 8, 0

Oldest week on the left; the latest four weeks are orange. Source: GitHub commit activity.

Status rule: archived on GitHub = Archived; last commit within 90 days = Active; 91 to 365 days = Slowing; older = Stale. All figures come from the GitHub API on the date shown.

Most discussed open issues

  • #7 Cross-engine interop: Ed25519 delegation verification with Attestix3 comments · 2026-03-19
  • #111 schema: identity/credential binding lacks distinct operator vs principal + evaluator-finding ref1 comments · 2026-05-29
  • #109 feat: role-based action gating for high-risk roles is not implemented (only Annex III classification exists)1 comments · 2026-05-29
  • #231 Feature idea: external source-rights observations as AI governance evidence0 comments · 2026-10-04
  • #81 Design question: DID-VC binding, EU AI Act vs cryptographic compliance, delegation-chain verification cost0 comments · 2026-05-17

Issue titles are quoted from GitHub. Open the link to check whether a problem still applies to the version you use.

05

Compatibility

Python
Python 3.8+
Verified via docs
06

Quick start

1
$ pip install attestix
07

Use cases

↳Make any AI agent EU AI Act compliant with machine-readable proof
↳Establish verifiable identity and reputation for autonomous agents
↳Generate signed compliance documentation for regulatory audits
08

Alternatives

⚡Top VS:
VSagent-bom★35→VStardygrada★23→VSnobulex★40→VSred-team-blue-team-agent-fabric★32→
agent-bom logo
agent-bom★ 35
Open security scanner for AI supply chain: agents, MCP, containers, cloud, GPU, and runtime with blast-radius analysis.
VSCompare→
tardygrada logo
tardygrada★ 23
Trust infrastructure for AI agents. Know who produced a value, when, and that it hasn't been tampered with. Zero dependencies. Pure C.
VSCompare→
nobulex logo
nobulex★ 40
The trust economy for autonomous AI agents. Credit scores for machines. Agents earn Trust Capital through verified behavior, gating what they are allowed to do. Autonomy earned, not granted.
VSCompare→
red-team-blue-team-agent-fabric logo
red-team-blue-team-agent-fabric★ 32
466 security tests for AI agent systems — MCP, A2A, x402/L402, decision governance, benchmark integrity, skill supply chain. AIUC-1 pre-cert, NIST AI 800-2 aligned, 5 DOIs. v4.3.0
VSCompare→
antrieb-mcp-server logo
antrieb-mcp-server★ 14
MCP server that validates AI-generated infra code on real VMs and self-corrects until it works.
VSCompare→
nothumanallowed logo
nothumanallowed★ 102
Epistemic dataset generation engine. 38 AI agents deliberate through multi-round Geth Consensus — producing auditable reasoning traces for AI training. Parliament System, Knowledge Grounding, zero-trust security.
VSCompare→
orca-skills logo
orca-skills★ 55
Skills and plugins to accelerate security workflows with the Orca Cloud Platform
VSCompare→
bluerock logo
bluerock★ 35
Runtime visibility for Python MCP servers. Captures tool calls, session lifecycle, module imports (SHA-256), and subprocess execution as structured NDJSON. No code changes. Apache 2.0
VSCompare→
See all alternatives →

Comments

Log in to leave a comment

No comments yet. Be the first!

On this page
01Features02Why choose it03Trade-offs04Maintenance check05Compatibility06Quick start07Use cases08Alternatives
VibeTensor /
attestix
↗

Agent identity, verifiable credentials and EU AI Act compliance as 47 MCP tools

84687Apache-2.0
Last commit1d ago
StatusActive
CategorySecurity & Safety
Contributors3
Latest releasev0.4.3
Links
Documentation↗Discussion↗Issues↗Releases↗
Cloud Infrastructure
Ad

Deploy on DigitalOcean

Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.

Claim $200 Free Credit
© 2026 AgentIndex.app|Built by a 10-year iOS Developer.
Best by use caseAboutContactAdvertisePrivacy PolicyTerms of UseQYSGitHubBuy me a coffee ☕

Browse by Category

MCP ServersCode AssistantWorkflow AutomationRAG / Knowledge BaseMulti-AgentBrowser AutomationLLM InfraDev ToolingObservability

Not affiliated with Anthropic, OpenAI or Microsoft.