agent-protocols

README

Agent Protocols

Go implementation of agent-to-agent communication protocols, starting with ID-JAG (Identity Assertion JWT Authorization Grant).

EXPERIMENTAL: This library implements draft specifications that are subject to change.

Overview

This repository provides Go libraries for emerging agent-to-agent protocols:

• idjag - Identity Assertion JWT Authorization Grant based on draft-ietf-oauth-identity-assertion-authz-grant

  • Examples - Working demos
  • PIDL Definitions - Protocol diagrams

• aims - Agent Identity Management System (AIMS) based on draft-klrc-aiagent-auth-00

  • Examples - Working demos (simple WIT/WPT, mTLS)
  • PIDL Definitions - Protocol diagrams

Installation

go get github.com/grokify/agent-protocols

Quick Start

ID-JAG Token Exchange

package main

import (
    "context"
    "fmt"
    "time"

    "github.com/grokify/agent-protocols/idjag"
)

func main() {
    // Create an assertion for token exchange
    assertion := &idjag.Assertion{
        Issuer:    "https://issuer.example.com",
        Subject:   "agent:my-agent",
        Audience:  []string{"https://auth.example.com"},
        IssuedAt:  time.Now(),
        ExpiresAt: time.Now().Add(5 * time.Minute),
    }

    // Exchange assertion for access token
    client := &idjag.TokenExchangeClient{
        TokenURL: "https://auth.example.com/token",
    }

    resp, err := client.Exchange(context.Background(), signedAssertion)
    if err != nil {
        panic(err)
    }

    fmt.Printf("Access Token: %s\n", resp.AccessToken)
}

Human-to-Agent Delegation

// Create assertion with delegation chain
assertion := &idjag.Assertion{
    Issuer:    "https://issuer.example.com",
    Subject:   "user:alice",  // Human identity
    Audience:  []string{"https://auth.example.com"},
    IssuedAt:  time.Now(),
    ExpiresAt: time.Now().Add(5 * time.Minute),
    Actor: &idjag.Actor{
        Subject: "agent:calendar-bot",  // Acting agent
    },
}

Examples

See the idjag/examples directory for complete working demos:

• simple - Agent-only flow without human delegation
• delegation - Human-to-agent delegation flow

Run an example:

go run ./idjag/examples/simple

Documentation

• ID-JAG: Getting Started | Protocol Overview
• AIMS: Getting Started | Overview
• API Reference
• Changelog

Related Specifications

• draft-ietf-oauth-identity-assertion-authz-grant - ID-JAG specification
• draft-klrc-aiagent-auth-00 - AIMS specification
• draft-ietf-wimse-s2s-protocol - WIMSE S2S Protocol (WIT/WPT)
• SPIFFE - Secure Production Identity Framework For Everyone
• RFC 8693 - OAuth 2.0 Token Exchange

License

MIT License - see LICENSE for details.