Hi HN, I built AgentSign because AI agents are now autonomous — they call APIs, access databases, execute code, and spend money. But there's no standard way to verify WHO an agent is, WHAT it did, or revoke it when things go wrong.

AgentSign is a zero trust engine for AI agents. The core idea:

1. Every agent gets a cryptographic passport (self-contained signed JSON, works offline) 2. Every execution is signed into a tamper-proof chain 3. MCP servers verify agent identity before granting tool access 4. Trust scores (0-100) based on actual behavior, not just permissions 5. Revoke a single agent or an entire swarm instantly

The "MCP Trust Layer" is the key feature — it sits between agents and MCP tool servers. Before an agent can use any tool, it presents its passport. AgentSign checks identity, trust score, and pipeline stage, then returns ALLOW or DENY. Every interaction is logged.

Technical stack: - Server: FastAPI + SQLite, Docker/Helm, runs entirely on-prem - SDK: `npm install agentsign` (zero runtime deps, Node 18+) - Signing: HMAC-SHA256 default, optional PKCS#11 / AWS KMS / Azure KV / GCP KMS / HashiCorp Vault - Pipeline: INTAKE -> VETTING -> TESTING -> DEV_APPROVED -> PROD_APPROVED -> ACTIVE

Server: https://github.com/razashariff/agentsign SDK: https://github.com/razashariff/agentsign-sdk npm: https://www.npmjs.com/package/agentsign

Happy to answer questions about the architecture or crypto design.