zeroid

What problem does it solve?

When autonomous agents act on behalf of users or other agents there is no reliable, auditable way to prove who performed an action and under what delegated authority; Zeroid provides cryptographically verifiable identities, short-lived credentials, and real-time revocation to restore clear accountability and secure delegation flows.

Core Features & Use Cases

• Agent Identity Management: Register agents and assign SPIFFE/WIMSE URIs with one-time API keys and optional public keys for JWT assertions.
• OAuth 2.1 Token Issuance & Delegation: Issue access tokens via api_key, client_credentials, jwt-bearer, authorization_code, refresh, and perform RFC 8693 token-exchange to delegate limited scope to sub-agents.
• Governance and Revocation: Create credential policies (TTL, allowed scopes, max delegation depth), introspect tokens, and revoke tokens or API keys immediately across delegation chains.
• Use Case: Employ Zeroid to provision unique agent identities for a CI pipeline, delegate limited runtime permissions to ephemeral worker agents, and revoke access instantly if a worker is compromised.

Quick Start

Use the zeroid skill to register an agent, save the returned API key securely, and request an access token for that agent.