Cryptographic identity for
AI agents.

import { AgentPKI } from '@agentpki/sdk';

const agent = new AgentPKI({
  issuer: 'anthropic.com',
  agentId: 'agent:anthropic.com/research-bot-v3',
  scope: ['read:articles', 'read:public-data'],
});

// Auto-signs every outbound request
// (RFC 9421 Mode B by default)
const res = await agent.fetch(
  'https://reuters.com/api/article/123'
);

POST https://verify.agentpki.dev/v1/verify
Content-Type: application/json

{
  "token": "v4.public.eyJpc3M...",
  "mode": "B",
  "request": {
    "method": "GET",
    "url": "https://reuters.com/..."
  }
}

→ HTTP 200  (21ms warm · 50ms cold)
{
  "verdict": "allow",
  "passport": {
    "issuer": "anthropic.com",
    "tier": 2,
    "scopes": ["read:articles"]
  },
  "abuse_score": 0.02,
  "crl_fresh": true,
  "replay_checked": true
}

// Slot into Cloudflare / DataDome /
// hCaptcha / Arkose decision pipelines.
// SIGNAL-only — never overrides yours.

const apkiSignal = async (req) => {
  const token = req.headers
    .get('AgentPKI-Token');
  if (!token) return null;

  const r = await fetch(
    'https://verify.agentpki.dev/v1/verify',
    { method: 'POST',
      body: JSON.stringify({ token }) }
  );
  const v = await r.json();
  return { verdict: v.verdict,
           tier: v.passport?.tier };
};

// → feeds your existing score
score -= (await apkiSignal(req))
  ?.verdict === 'allow' ? 30 : 0;