Attestix

Get the EU AI Act compliance profile for an agent. Args: agent_id: The Attestix agent ID.

Check completeness of the recorded evidence workflow. Shows completed and missing evidence checks. Legal applicability, evidence quality, and conformity are not assessed by this tool. Args: agent_id: The Attestix agent ID.

Get full details of a Verifiable Credential. Args: credential_id: The credential URN.

Get full UAIT details for a specific agent. Args: agent_id: The Attestix agent ID.

Get full provenance record for an agent (training data, model lineage, audit summary). Args: agent_id: The Attestix agent ID.

Get the trust score and interaction history for an agent. Returns a recency-weighted score from 0.0 to 1.0 with category breakdown. Args: agent_id: The Attestix agent ID to check.

Issue a W3C Verifiable Credential with Ed25519Signature2020 proof. Args: agent_id: The Attestix agent ID this credential is about. credential_type: Credential type (e.g., EUAIActComplianceCredential, AgentIdentityCredential). issuer_name: Name of the issuing authority. claims_json: JSON string of credential claims (e.g., {"compliant": true, "risk_level": "high"}). expiry_days: Days until credential expires (default 365).

List EU AI Act compliance profiles with optional filters. Args: risk_category: Filter by risk level (minimal, limited, high, unacceptable). Empty = all. compliant_only: Deprecated filter for recorded declaration presence, not legal conformity. limit: Maximum number of results.

List Verifiable Credentials with optional filters. Args: agent_id: Filter by subject agent ID. Empty = all agents. credential_type: Filter by type (e.g., EUAIActComplianceCredential). Empty = all types. valid_only: Only return non-revoked, non-expired credentials. limit: Maximum number of results.

List delegation tokens, optionally filtered by agent and role. Args: agent_id: Filter by agent ID (empty = all). role: Filter role: 'issuer', 'audience', or 'any'. include_expired: Whether to include expired delegations.

List all registered agent identities (UAITs). Args: source_protocol: Filter by protocol (mcp_oauth, a2a, did, api_key, manual). Empty = all. include_revoked: Whether to include revoked identities. limit: Maximum number of results.

Log an agent action for EU AI Act Article 12 automatic logging. Args: agent_id: The Attestix agent ID. action_type: One of: inference, delegation, data_access, external_call. input_summary: Brief description of the input/request. output_summary: Brief description of the output/response. decision_rationale: Why the agent made this decision. human_override: Whether a human overrode the agent's decision.

Parse an A2A Agent Card JSON string into normalized fields. Args: agent_card_json: Raw JSON string of an A2A Agent Card.

GDPR Article 17 right to erasure. Permanently deletes ALL data for an agent. Removes identity, credentials, compliance profiles, delegations, provenance records, reputation data, and audit logs. This action is irreversible. Blockchain anchors are immutable and cannot be purged. Args: agent_id: The Attestix agent ID to purge.

Search for agents by reputation criteria. Args: min_score: Minimum trust score (0.0 - 1.0). max_score: Maximum trust score (0.0 - 1.0). min_interactions: Minimum number of recorded interactions. category: Filter by interaction category (empty = all). limit: Maximum results to return.

Record a conformity assessment for EU AI Act Article 43. Stores the provider's assessment record; assessor authority and legal conformity are not verified by Attestix. Assessment procedure rules depend on the profile's recorded classification. Args: agent_id: The Attestix agent ID. assessment_type: self or third_party. assessor_name: Name of the assessor or notified body. result: Assessment result: pass, conditional, or fail. findings: Detailed findings or conditions. ce_marking_eligible: Provider-recorded eligibility claim, not a legal determination.

Record an interaction outcome and update the agent's trust score. Args: agent_id: The agent being evaluated. counterparty_id: The other party in the interaction. outcome: One of: success, failure, partial, timeout. category: Interaction category (e.g., task, delegation, general). details: Optional description of what happened.

Record model lineage chain for EU AI Act Article 11 compliance. Args: agent_id: The Attestix agent ID. base_model: Base model name (e.g., claude-opus-4-6, gpt-4). base_model_provider: Model provider (e.g., Anthropic, OpenAI). fine_tuning_method: Fine-tuning approach if any (LoRA, full, RLHF, none). evaluation_metrics_json: JSON string of evaluation metrics (e.g., {"accuracy": 0.95}).

Record a training data source for EU AI Act Article 10 compliance. Args: agent_id: The Attestix agent ID (e.g., attestix:abc123...). dataset_name: Name of the training dataset. source_url: URL or location of the dataset. license: Data license (e.g., CC-BY-4.0, proprietary). data_categories: Comma-separated categories (e.g., text,images,structured). contains_personal_data: Whether dataset contains personal data (GDPR). data_governance_measures: Description of data quality/governance measures.

Resolve any DID to its DID Document. Supports did:key (local), did:web (HTTP), and others via Universal Resolver. Args: did: The DID to resolve (e.g., did:key:z6Mk..., did:web:example.com).

Auto-detect token type (JWT/DID/URL/API key) and create a UAIT. Args: identity_token: Any identity string to analyze and register.

Revoke a Verifiable Credential. Args: credential_id: The credential URN to revoke. reason: Why the credential is being revoked.

Revoke a UCAN delegation token by its JTI (JWT ID). Once revoked, the token will fail verification even if not expired. Args: jti: The unique identifier of the delegation (from create_delegation response). reason: Why this delegation is being revoked.

Revoke a UAIT, marking it as no longer valid. Args: agent_id: The Attestix agent ID to revoke. reason: Why this identity is being revoked.

Convert a UAIT to another identity format. Args: agent_id: The Attestix agent ID to translate. target_format: One of: a2a_agent_card, did_document, oauth_claims, summary.

Update an existing EU AI Act compliance profile. Use this to iteratively fill in compliance information over time. Only non-empty fields will be updated. Args: agent_id: The Attestix agent ID. intended_purpose: Updated purpose description. transparency_obligations: Updated transparency info. human_oversight_measures: Updated human oversight info. provider_name: Updated provider name.

Verify an on-chain anchor for an artifact. Provide either artifact_id (to look up and hash the artifact) or artifact_hash (direct SHA-256 hex) to check against on-chain records. Args: artifact_id: The artifact ID (agent ID or credential URN). Will be looked up and hashed. artifact_hash: Direct SHA-256 hex hash to verify. Use if you already have the hash.

Verify a Verifiable Credential: check signature, expiry, and revocation. Args: credential_id: The credential URN (e.g., urn:uuid:...).

Verify a Verifiable Credential provided as raw JSON. Use this when you receive a VC from another party and need to validate it without it being in local storage. Checks signature, expiry, and structure. Args: credential_json: The full W3C Verifiable Credential as a JSON string.

Verify a UCAN delegation token's signature, expiry, and structure. Args: token: The JWT delegation token to verify.

Verify a UAIT: check existence, revocation, expiry, and signature. Args: agent_id: The Attestix agent ID (e.g., attestix:abc123...).

Verify a Verifiable Presentation provided as raw JSON. Validates the VP signature and each contained credential. When the verifier supplies expected context, checks the signed challenge/domain. The verifier must separately consume challenges to prevent reuse. Args: presentation_json: The full W3C Verifiable Presentation as a JSON string. expected_challenge: Challenge issued by the verifier, when required. expected_domain: Intended verifier domain, when required.