Skip to content

Releases: sunilp/aip

aip-core v0.3.0 — A2A binding + interactive site

09 May 09:56
@sunilp sunilp
aip-core-v0.3.0
0696b7d

Choose a tag to compare

View all tags
aip-core v0.3.0 — A2A binding + interactive site Latest
Latest

[0.3.0] - 2026-05-08

Added

  • New aip_a2a module: AIP binding for the Agent-to-Agent (A2A) protocol.
    • verify_a2a_task() — verify chained tokens carried in A2A task metadata.aip_token
    • append_delegation_block() — extend a chain before forwarding a task
    • A2AVerifyMiddleware — framework-agnostic wrapper for A2A task handlers
    • parse_aip_identity() — extract and validate the aip_identity extension from agent cards
    • A2A-specific error types: AudienceError, ScopeError, ChainError, ExpiryError, DepthError
  • Rendered specification at https://sunilprakash.com/aip/spec/.
  • Interactive protocol page at https://sunilprakash.com/aip/paper/ (verification flow, chain viewer, attack simulator).

Changed

  • agent-identity-protocol package now ships four sub-packages: aip_core, aip_token, aip_mcp, aip_a2a.
  • ChainedToken.authorize() now correctly handles delegated tokens with budget constraints (was previously failing on any chained token with budget_cents set on a delegation block) and explicitly enforces scope attenuation across delegation hops.

Notes

  • No breaking changes. All aip_core, aip_token, aip_mcp imports continue to work unchanged.
Assets 2
Loading

v0.2.0 — MCP Auth Proxy

12 Apr 21:07
@sunilp sunilp
aip-core-v0.2.0
9f39631

Choose a tag to compare

View all tags
v0.2.0 — MCP Auth Proxy

What's New

aip-proxy CLI

Drop-in MCP authentication proxy that wraps any MCP server with AIP token verification. One command to add cryptographic identity to your MCP setup:

pip install agent-identity-protocol
aip-proxy --config proxy.toml

Security Self-Audit

New aip_mcp.audit module provides automated security analysis of AIP tokens:

  • Token hygiene (expiry, audience binding, signature strength)
  • Scope safety (overprivileged tokens, wildcard detection)
  • Budget limits (missing or excessive spend ceilings)
  • Chain integrity (delegation depth, attenuation violations)

Full Changelog

  • aip-proxy CLI entry point
  • aip_mcp.audit -- security self-audit for compact and chained tokens
  • aip_mcp.config -- TOML-based proxy configuration
  • aip_mcp.proxy -- HTTP proxy server for MCP transports
  • __version__ attribute added to aip_core
  • CHANGELOG.md added

Install: pip install agent-identity-protocol==0.2.0
Install with framework adapters: pip install aip-agents[all]==0.2.0

Links:

Loading