agent-nebula-sdk

Agent Nebula SDK

Agent Nebula SDK is a Python security library that provides reusable OAuth, JOSE, token-validation, and sender-constrained authentication components for agent applications. It supplies security primitives and integration contracts; it does not operate the hosted Agent Nebula Registry, OAuth server, or policy service.

The SDK is used by Agent Nebula Platform, which integrates these capabilities with the official A2A Python SDK. Developers building agents can use SecureAgent as the higher-level interface.

Why use the SDK?

• Standards-based security: reusable OAuth and JOSE implementations instead of application-specific token and proof validation.
• Separation of responsibilities: client, authorization-server, and resource-server facades with application-supplied persistence and policy decisions.
• Sender-constrained requests: DPoP proof validation, token binding, replay checks, and resource targeting.
• Protocol integration: HTTP security components for A2A and MCP authorization profiles; the SDK does not implement A2A or MCP message transport.
• Composable infrastructure: ports and adapters for storage, key management, and HTTP interactions.

Security capabilities

For implementation details, constraints, and conformance references, see standards mapping, security model, and documentation index. Additional protocol modules in the source tree should not be assumed to constitute a complete hosted service.

Install

Requires Python 3.12.

pip install agent-nebula-sdk

To develop from source:

uv sync --group dev
make verify

Architecture and integrations

The SDK implements security primitives and exposes contracts for application-owned persistence, credential storage, and authorization decisions. Architecture · Public API · Ports and adapters · Agent Nebula integration.

Documentation

Start with the documentation index. It links to architecture, API facades, OAuth standards, authentication flows, configuration, testing, and integration guidance.

License

Apache License 2.0. See LICENSE.