PACKAGE EXPLORERView in registry

agents-keys

PyPI

Mint and sign agent Ed25519 keys (did:key). CLI only; no MCP.

Versions collected1

Direct dependencies1From release 0.0.4

Last observed20 Oct, 23:23 UTC

README

Version 0.0.4 documentation

agents-keys

Host Ed25519 keys for agents (`did:key`).
CLI only. The secret never leaves this machine, and never hits stdout.

Quickstart

pip install agents-keys

There is no init and no MCP server. Other loops shell out.

agents-keys mint <slug>

Writes ~/.agents/keys/<slug>.ed25519 (64-byte libsodium seed, mode 0600). Stdout is one did:key:z6Mk… line. The path is stderr.

[!TIP] 🤖 Agent-Driven Setup: Give your coding agent this repo (clone or URL), then tell it to "install agents-keys and mint a key for <slug>."

Source checkouts can also be installed and managed with vand.

What it does

Mint or import a host key, derive did:key and an ssh-ed25519 line, sign a nonce, or answer a board challenge (prove).

resolve fetches a did.json or mailto home document. pin stores that did:key in a local TOFU ledger. A later resolve that disagrees with the pin fails.

The secret file is not printed, logged, or committed. Do not put it in a long-running server. Call this CLI as a subprocess.

CLI

Machine-readable catalog: python -m agents_keys --help-json (do not scrape --help).

Command	Purpose
`agents-keys mint <slug>`	New key file. Stdout: `did:key`
`agents-keys import <slug> <path>`	Unencrypted OpenSSH or libsodium secret. Stdout: `did:key`
`agents-keys did <slug>`	`did:key` from an existing file
`agents-keys ssh-pubkey <slug>`	One `ssh-ed25519` public line
`agents-keys sign <slug> <nonce>`	Ed25519 signature hex over the nonce
`agents-keys prove <slug> <board-url>`	Fetch a challenge, print `{did, nonce, signature}`
`agents-keys resolve <locator>`	Fetch a home document, print keys JSON
`agents-keys pin <locator>`	Resolve and TOFU-pin into `known-dids.jsonl`

prove accepts --verb, --handle, and --successor-did. When the board returns an event canonical, the JSON also includes event_signature.

agents-keys prove human https://board.example --verb bind-key --handle alice
agents-keys prove human https://board.example --verb move --handle alice --successor-did did:web:board.example:users:alice

No subcommand prints help.

Environment

Variable	Default	Description
`AGENTS_KEYS_DIR`	`~/.agents/keys`	Host secret files (`<slug>.ed25519`)
`AGENTS_KNOWN_DIDS`	`~/.agents/known-dids.jsonl`	TOFU pins for external DIDs

ABI

Contract in abi/:

WHY.md — host secret, public stdout
LAYOUT.md — <slug>.ed25519 and did:key
CLI.md — commands

Tests

python -m unittest discover -s tests -p "test_*.py"

License

MIT. See LICENSE.

Downloads & popularity

Awaiting observations

No metric observations yet

Download counts and popularity will appear here as the collector receives them.

Versions 1

Collected releases

Version	Published	Direct dependencies	Open version
0.0.4	6 Oct 2026	1

Package advisories

No matching advisories collected

This describes our collected data; it is not a security assessment.

Repository

PENDING

lolaplex/agents-keys

Shared repository data · GitHub

License detected in repository: Not collected

Metadata history

Meaningful changes

Current collected state Current

Observed since 20 Oct, 23:23 UTC

No superseded metadata states collected. Unchanged observations do not create new revisions.

Record identity

package:c91318da6ddb04e9fb3de01deeea83a612450ae4cce48ca659cfa5e373ad47f6