Cryptographic evidence for every AI agent you run

Name: Attestix
Author: VibeTensor

Framework agents, MCP clients, coding agents, or your own code: Attestix gives each one a verifiable identity and a tamper-evident audit trail that a regulator, auditor, or another agent can check for itself.

Try the console demo

Works with the agents you already run

Agent frameworks

Protocol

Any MCP client

Coding agents

Claude Code (Pro)
Others coming

Attestix Console / illustrative fixture datademo

Agents

8 / 8 agents

Agent	Risk	Trust
quarterly-analyst-v2	HIGH	0.94
clinical-triage-bot	HIGH	0.78
supply-chain-optimizer	LIM	0.89
fraud-detector	MIN	0.96
doc-summarizer	MIN	0.91

↗

Interactive preview. Data is simulated; pip install attestix for the real thing.

How Attestix works

One identity per agent. Evidence anyone can check.

Issue an identity

$ attestix init --name loan-screener

created attestix:3bc98bdc57e34279

did:key:z6MkqfYpFxHNGSdtfoJpom...

Each agent gets a DID and a signed identity record before its first action.

Record instrumented actions

data_access 3f39525c ← 00000000

inference e5f7013f ← 3f39525c

external_call 7328e467 ← e5f7013f

Chain integrity: VERIFIED

Recorded actions append to a signed hash chain. Verify against trusted keys and checkpoints; capture completeness needs separate evidence.

Your agents, connected through

LangChain

callback

CrewAI

MCP

OpenAI Agents

MCP

Claude Code

MCP

Verify anywhere

verifyCredential(vc) // JavaScript

valid: true

signature_valid: true

A credential issued in Python verifies offline in JavaScript; SDKs for Go, Rust, Java, and R share the same test vectors. Live revocation still needs the issuer.

Illustrative CLI and API output for attestix 0.4.3, with the credential verified by the JavaScript SDK. Hashes shortened to 8 characters.

See the full platform

Evidence that holds up.
No call home required.

0.4.3

Current core release

626

Local tests passed

Verifier language implementations

Apache 2.0

Open-source license

The recorded core suite passed 626 local tests, with 4 skipped. Verifier implementations share selected fixtures, with different trust and API boundaries. The browser verifier at /verify uploads nothing. Apache 2.0: self-host free, forever.

What’s newAttestix v0.4.3 release notes

Built on open standards

Attestix builds on published specifications rather than a private format, so the evidence outlives any one vendor, including us.

W3C Verifiable Credentials

Credentials use the W3C VC 1.1 data model, a shape wallets and verifiers already understand.

Read the specification ↗

W3C Decentralized Identifiers

Agents are named by did:key and did:web identifiers that resolve without Attestix in the loop.

Read the specification ↗

IETF Ed25519 and Merkle hashing

Ed25519 signatures (RFC 8032) and RFC 6962 leaf and node hashing, with optional anchoring on Base via EAS.

Read the specification ↗

Read the research

Install Attestix

Open source. Runs as a Python library, a CLI, or an MCP server.

$ pip install attestix

# create a signed identity for an agent

$ attestix init --name my-agent

$ attestix verify "AGENT_ID"

Replace AGENT_ID with the agent ID printed by the init command before running verification.

Setup documentation

FAQ

›What is Attestix?

Attestix is an open-source attestation infrastructure for AI agents. It covers verifiable identity, W3C credentials, delegation chains, compliance declarations, provenance tracking, reputation scoring, and blockchain anchoring across 9 modules.

›Does Attestix work with LangChain, OpenAI Agents SDK, or CrewAI?

Yes, all three ship in the attestix package. LangChain: AttestixCallback, a BaseCallbackHandler that logs chain, tool, and LLM events to the hash-chained Attestix audit trail. OpenAI Agents SDK: AttestixAuditHook, a helper you call to log guardrail and tool decisions. CrewAI: AttestixCrewAdapter, which you call from your Task callbacks to log task start and finish. Any MCP-compatible client (for example Claude Desktop or Cursor) can also run the Attestix MCP server over stdio with python -m attestix.main.

›Can I use Attestix without blockchain?

Yes. Blockchain anchoring is optional. All core features (identity, credentials, delegation, compliance, provenance, reputation) work fully without any blockchain dependency.

›What is the current maturity level?

This site describes current main source. Check the selected package release notes and repository validation; source merges do not publish registry artifacts or establish operating acceptance.

All questions

30-minute call