alibaba

Open Agent Auth

Name: Open Agent Auth
Author: alibaba

Security community

SOURCE https://github.com/alibaba/open-agent-auth

Description

An enterprise framework implementing the Agent Operation Authorization protocol with cryptographic identity binding, fine-grained authorization, and semantic audit trails for secure AI agent operations.

Installation

This entry records only its repository, not the path inside it, so there is no exact command to give. Open the source below and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

README

Open Agent Auth

**English** | [中文](README.zh-CN.md)

Enterprise-Grade AI Agent Operation Authorization Framework

![License](https://img.shields.io/badge/license-Apache%202.0-blue.svg) ![Java](https://img.shields.io/badge/Java-17+-orange.svg) ![Spring Boot](https://img.shields.io/badge/Spring%20Boot-3.3+-green.svg) ![Code Coverage](https://img.shields.io/badge/coverage-85%25-brightgreen) ![Build Status](https://github.com/alibaba/open-agent-auth/actions/workflows/ci.yml/badge.svg) ![Version](https://img.shields.io/badge/version-v0.1.0--beta.1-blue)

[Quick Start](#quick-start) · [Architecture](#architecture) · [Security](#security) · [Documentation](#documentation) · [Roadmap](#roadmap)

Overview

Open Agent Auth is an enterprise-grade authorization framework that provides cryptographic identity binding, fine-grained authorization, request-level isolation, and semantic audit trails for AI agents operating on behalf of users. **It builds a collaborative ecosystem where humans, agents, and resource providers work as equal partners with mutual trust and accountability.**

The framework is implemented based on [IETF Draft: Agent Operation Authorization (draft-liu-agent-operation-authorization-01)](https://datatracker.ietf.org/doc/draft-liu-agent-operation-authorization/), extending upon this standard by leveraging industry-standard protocols (OAuth 2.0, OpenID Connect, WIMSE, W3C VC) and featuring Model Context Protocol (MCP) integration to ensure every agent-executed operation is traceable to explicit user consent.

Project Status

**Open Agent Auth is in public beta** — feature-complete, actively evolving, and ready for you to explore.

The core is working, the API is stabilizing, and your feedback still shapes the road to 1.0.0 We ship fast, iterate faster, and track everything openly in our [roadmap](#r