AIP — Agent Intent Protocol (TypeScript)

The only thing that makes AI agents production-ready.

Cryptographic identity, boundary enforcement, and an instant kill switch for autonomous AI agents. Works with LangChain.js, Vercel AI SDK, or any TypeScript/JavaScript agent framework.

Install

npm install aip-protocol

Quick Start

import { verifyIntent, RevocationStore, hexToBytes } from "aip-protocol";

// Verify an agent's signed intent before allowing execution
const result = verifyIntent(envelope, {
  publicKey: hexToBytes("e734ea6c..."),
  revocationStore: new RevocationStore(),
});

if (result.valid) {
  console.log(`✓ Verified — tier: ${result.tier_used}`);
  executeAction(envelope.intent); // Safe to proceed
} else {
  console.log(`✗ Blocked: ${result.errors.join(", ")}`);
  // e.g. "AIP-E202: MONETARY_LIMIT" or "AIP-E400: AGENT_REVOKED"
}

What It Does

| Capability | Description | |---|---| | Cryptographic Identity | Ed25519 keypair per agent, DID-based addressing | | Boundary Enforcement | Action allowlists, monetary limits, geo restrictions, time windows | | Kill Switch | Revoke any agent instantly via the Revocation Mesh | | Tiered Verification | Tier 0 (<1ms HMAC) → Tier 1 (~5ms Ed25519) → Tier 2 (full pipeline) | | Intent Drift Detection | Flags actions outside an agent's declared scope | | Replay Protection | Nonce-based replay attack prevention |

Real-Time Kill Switch (Mesh Client)

Connect to the AIP Revocation Mesh for real-time agent management:

import { MeshClient } from "aip-protocol";

const mesh = new MeshClient("your_api_key", {
  onRevocation: (event) => {
    console.log(`🚨 Agent ${event.agent_id} ${event.type}: ${event.reason}`);
  },
});

await mesh.connect();

// Kill a rogue agent across all connected services instantly
await mesh.revoke("did:web:acme.com:agents:rogue-bot", "anomalous_behavior");

// Check status
const status = await mesh.status("did:web:acme.com:agents:my-bot");

Error Codes

Every failure returns a machine-readable AIP-Exxx code:

| Range | Category | Examples | |---|---|---| | AIP-E1xx | Envelope Errors | Invalid Signature, Expired, Replay Detected | | AIP-E2xx | Boundary Violations | Action Not Allowed, Monetary Limit, Geo Restricted | | AIP-E3xx | Attestation Failures | Model Hash Mismatch, Intent Drift | | AIP-E4xx | Trust Failures | Agent Revoked, Delegation Invalid | | AIP-E5xx | Protocol Errors | Mesh Unavailable, Handshake Timeout |

Conformance

This SDK passes all 31 AIP-1 conformance test vectors, byte-identical to the reference Python SDK:

npx tsx src/conformance.ts
# ✓ ALL 31 VECTORS PASSED

Architecture

src/
  types.ts        — TypeScript interfaces (IntentEnvelope, VerificationResult, etc.)
  canonical.ts    — Canonical serialization (byte-identical to Python SDK)
  crypto.ts       — Ed25519 + HMAC-SHA256 via @noble/ed25519
  revocation.ts   — In-memory revocation store with nonce replay detection
  verification.ts — Full 8-step verification pipeline
  mesh.ts         — Real-time Revocation Mesh client (SSE)
  index.ts        — Barrel exports

Dependencies

Only two runtime dependencies — both audited, pure-JS cryptographic libraries:

• @noble/ed25519 — Ed25519 signatures (RFC 8032)
• @noble/hashes — SHA-256, SHA-512, HMAC

Links

• Python SDK: pip install aip-protocol
• Dashboard: korven.cc
• GitHub: github.com/theaniketgiri/aip
• Documentation: korven.cc/docs

License

MIT