Manage agent identities and credentials via a REST API.
npx skills add https://github.com/highflame-ai/zeroid --skill zeroid
Please help me install this Agent Skill. Skill: zeroid Source: https://github.com/highflame-ai/zeroid/tree/main/examples/claude-skill Command: npx skills add https://github.com/highflame-ai/zeroid --skill zeroid
When autonomous agents act on behalf of users or other agents there is no reliable, auditable way to prove who performed an action and under what delegated authority; Zeroid provides cryptographically verifiable identities, short-lived credentials, and real-time revocation to restore clear accountability and secure delegation flows.
Use the zeroid skill to register an agent, save the returned API key securely, and request an access token for that agent.
High-intent search queries and answers about installing and using this skill.
Manage OAuth 2.1 token delegation by registering agents and using RFC 8693 token-exchange to issue limited-scope access tokens to sub-agents. This provides cryptographically verifiable identities and auditable delegated authority.
RFC 8693 token-exchange is a mechanism to delegate limited permissions by trading an existing access token for a new one with restricted scope. You need it when autonomous agents or ephemeral workers act on behalf of users or other agents.
Yes, you can issue SPIFFE/WIMSE URIs and one-time API keys for registered agents. Multi-tenant administration is supported via tenant headers on admin routes to separate identity and credential policy enforcement.
Revoke delegated OAuth tokens instantly by triggering token or API key revocation workflows. This immediately invalidates credentials across the entire delegation chain to restore accountability if a worker agent is compromised.
Enforce credential policies by setting constraints such as maximum TTL, allowed scopes, and maximum delegation depth. These policy-enforced limits govern OAuth 2.1 token issuance and RFC 8693 token-exchange operations.
Yes, OAuth 2.1 token issuance supports api_key, client_credentials, jwt-bearer, authorization_code, and refresh grants. Agents can use registered public keys to sign JWT assertions for authentication.
huialiImplement JWT, API key, password hashing, and RBAC authentication in Rust services.
AeyeOpsBuild autonomous AI agents with the Claude Agent SDK.
NagyViktExecute untrusted code in ephemeral Firecracker microVMs with network policy enforcement.
ginkidaDesign OAuth 2.0 and OpenID Connect authorization flows with PKCE and JWT validation.
