@deeplethe/demarche (TypeScript)

Vendor-neutral identity verifier for AI agents.

⚠️ Pre-alpha. Spec v0.1 in development. No public API yet. Watch https://github.com/deeplethe/demarche for v0.1 release.

Install

npm install @deeplethe/demarche
# or
pnpm add @deeplethe/demarche
# or
bun add @deeplethe/demarche

The package is scoped as @deeplethe/demarche because npm's typosquat policy rejected the unscoped demarche name (too close to existing decache). The PyPI counterpart uses the bare name demarche.

What this will do (target API for v0.1)

import { Verifier } from "@deeplethe/demarche";

const verifier = Verifier.fromConfig({
  issuers: ["openagents", "a2a", "oauth-obo"],
});

const result = await verifier.verify(token);

// result.principalId  — the user who delegated authority
// result.agentId      — the agent acting on their behalf
// result.issuer       — which issuer minted the credential
// result.scopes       — what the agent is authorized to do
// result.auditId      — stable ID for correlating audit logs

One SDK, multiple issuers (OpenAgents AgentID, Microsoft Entra Agent ID, Auth0 for AI Agents, A2A Agent Cards, OAuth OBO, W3C VCs).

Status

• Spec: v0.1 draft
• API: stub only — placeholder package to claim the name
• Issuer adapters: not yet shipped

License

Apache-2.0. See LICENSE.