GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • capiscio
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles

This view

  • Original page
  • New address

GeezerVison is showing github.com — CapiscIO

README.md

CapiscIO

AI Security for Agentic Systems

Authenticate agents. Block spoofing. Enforce trust levels.

License Twitter Follow LinkedIn

Website · Documentation · Blog


The Problem

AI agents are calling each other and invoking tools—but there's no standard way to verify who is calling what. CapiscIO provides the missing identity layer:

  • Identity — Ed25519 signatures prove which agent made the request
  • Integrity — SHA-256 body hashing detects tampering
  • Freshness — 60-second replay windows reject stale traffic

All with sub-millisecond overhead.


Quick Start

# Python SDK for FastAPI/Flask
pip install capiscio-sdk

# MCP server protection
pip install capiscio-mcp

# CLI for validation
npm install -g capiscio

Then protect your endpoints:

from fastapi import FastAPI
from capiscio_sdk import SimpleGuard

app = FastAPI()
guard = SimpleGuard(app)  # That's it

Repositories

Core

Repository Description
capiscio-sdk-python Python SDK with FastAPI/Flask middleware. Drop-in guard for A2A endpoints.
capiscio-mcp-python MCP SDK wrapper. Adds CapiscIO identity and signing to MCP servers.
capiscio-core High-performance Go enforcement engine. Also available as capiscio/guard Docker image.

Developer Tools

Repository Description
capiscio-node Node CLI (capiscio). Validate agent cards, test endpoints, run security checks in CI.
capiscio-python Python CLI wrapper for Python-centric environments.
validate-a2a GitHub Action for CI/CD. Validates agent cards and enforces compliance.

Examples & Demos

Repository Description
a2a-demos Three production-ready agent demos (LangChain, CrewAI, LangGraph) with CapiscIO security. Great starting point.

Specifications

Repository Description
capiscio-rfcs RFC specifications for trust badges, proof of possession, and protocol extensions.

OWASP Coverage

CapiscIO addresses 6 of the OWASP Top 10 for Agentic Applications:

Risk Coverage
AG01: Agent Identity Spoofing ✅ Direct
AG06: Communication Tampering ✅ Direct
AG07: Replay Attacks ✅ Direct
AG10: Audit & Logging Gaps ✅ Direct
AG02: Tool Misuse ⚡ Partial
AG03: Excessive Agency ⚡ Partial

Trust Levels

Like SSL certificates, but with 5-minute TTLs:

Level Validation Use Case
0 Self-signed Local development
1 Domain verified Production agents
2 Organization verified Enterprise
3 Extended validation High-trust scenarios

Architecture

┌─────────────────────────────────────────────────────────┐
│              CapiscIO Registry (optional)               │
│         Agent Discovery · Trust Badges · Events         │
└─────────────────────────┬───────────────────────────────┘
                          │
        ┌─────────────────┼─────────────────┐
        ▼                 ▼                 ▼
┌──────────────┐   ┌──────────────┐   ┌──────────────┐
│   Agent A    │   │   Agent B    │   │  MCP Server  │
│              │   │              │   │              │
│ capiscio-sdk │──▶│ capiscio-sdk │──▶│ capiscio-mcp │
│  (signing)   │   │ (verifying)  │   │ (verifying)  │
└──────────────┘   └──────────────┘   └──────────────┘

Each agent gets a cryptographic identity (DID) and signs requests. Receiving agents verify signatures before processing.


Contributing

  1. Try the demos — Clone a2a-demos and run three agents in 5 minutes
  2. Read the docs — docs.capisc.io
  3. Open issues — Found an edge case? Let us know
  4. Join the discussion — Reddit · LinkedIn · X

Open source under Apache 2.0 · Built for the agentic era

Pinned Loading

  1. capiscio-node capiscio-node Public

    The definitive CLI for validating A2A (Agent-to-Agent) protocol agent cards. Validates cryptographic trust, schema compliance, and live endpoint functionality.

    TypeScript 4 1

  2. capiscio-sdk-python capiscio-sdk-python Public

    Runtime security middleware for A2A (Agent-to-Agent) protocol agents. Provides always-on validation, signature verification, and rate limiting for AI agent interactions.

    Python 3 1

  3. capiscio-python capiscio-python Public

    The official CapiscIO CLI tool for validating A2A agents. A lightweight Python wrapper that automatically manages the capiscio-core binary.

    Python 1 1

  4. capiscio-core capiscio-core Public

    The Identity Authority and Trust Gateway for the AI Agent economy. Issues and verifies cryptographic TrustBadges to secure cross-cloud Agent-to-Agent (A2A) communication.

    Go 2 1

  5. validate-a2a validate-a2a Public

    Official CapiscIO GitHub Action to validate A2A (Agent-to-Agent) Agent Cards. Features schema validation, cryptographic verification, and live endpoint testing with 3D quality scoring.

    TypeScript 1

  6. capiscio-mcp-python capiscio-mcp-python Public

    CapiscIO MCP Guard - Secure your MCP tools with agent-to-server authentication, authorization, and audit logging

    Python 2 1

Repositories

Loading
Type
Language
Sort
Showing 10 of 11 repositories
  • capiscio-core Public

    The Identity Authority and Trust Gateway for the AI Agent economy. Issues and verifies cryptographic TrustBadges to secure cross-cloud Agent-to-Agent (A2A) communication.

    Uh oh!

    There was an error while loading. Please reload this page.

    capiscio/capiscio-core's past year of commit activity
    Go 2 Apache-2.0 1 5 0 Updated Sep 6, 2026
  • capiscio-mcp-python Public

    CapiscIO MCP Guard - Secure your MCP tools with agent-to-server authentication, authorization, and audit logging

    Uh oh!

    There was an error while loading. Please reload this page.

    capiscio/capiscio-mcp-python's past year of commit activity
    Python 2 Apache-2.0 1 7 0 Updated May 28, 2026
  • capiscio-sdk-python Public

    Runtime security middleware for A2A (Agent-to-Agent) protocol agents. Provides always-on validation, signature verification, and rate limiting for AI agent interactions.

    Uh oh!

    There was an error while loading. Please reload this page.

    capiscio/capiscio-sdk-python's past year of commit activity
    Python 3 Apache-2.0 1 2 0 Updated May 28, 2026
  • capiscio-rfcs Public

    Request for Comments (RFCs) for CapiscIO protocols and standards. Proposals for AGCP, trust policies, agent identity, and the governance of autonomous agent systems.

    Uh oh!

    There was an error while loading. Please reload this page.

    capiscio/capiscio-rfcs's past year of commit activity
    0 0 0 0 Updated May 26, 2026
  • a2a-demos Public

    Demo agents showcasing CapiscIO Agent Guard and MCP Guard — trust badges, identity verification, and tool-level authorization for A2A and MCP protocols

    Uh oh!

    There was an error while loading. Please reload this page.

    capiscio/a2a-demos's past year of commit activity
    Python 23 MIT 0 0 0 Updated May 22, 2026
  • capiscio-docs Public

    Uh oh!

    There was an error while loading. Please reload this page.

    capiscio/capiscio-docs's past year of commit activity
    Python 0 1 0 0 Updated May 22, 2026
  • langchain-capiscio Public

    Trust enforcement for LangChain and LangGraph agents — verify caller badges, enforce security policies, and emit audit events via LCEL composable guards. Powered by CapiscIO.

    Uh oh!

    There was an error while loading. Please reload this page.

    capiscio/langchain-capiscio's past year of commit activity
    Python 1 0 0 0 Updated May 14, 2026
  • validate-a2a Public

    Official CapiscIO GitHub Action to validate A2A (Agent-to-Agent) Agent Cards. Features schema validation, cryptographic verification, and live endpoint testing with 3D quality scoring.

    Uh oh!

    There was an error while loading. Please reload this page.

    capiscio/validate-a2a's past year of commit activity
    TypeScript 1 Apache-2.0 0 0 0 Updated May 13, 2026
  • capiscio-node Public

    The definitive CLI for validating A2A (Agent-to-Agent) protocol agent cards. Validates cryptographic trust, schema compliance, and live endpoint functionality.

    Uh oh!

    There was an error while loading. Please reload this page.

    capiscio/capiscio-node's past year of commit activity
    TypeScript 4 Apache-2.0 1 0 0 Updated May 13, 2026
  • capiscio-python Public

    The official CapiscIO CLI tool for validating A2A agents. A lightweight Python wrapper that automatically manages the capiscio-core binary.

    Uh oh!

    There was an error while loading. Please reload this page.

    capiscio/capiscio-python's past year of commit activity
    Python 1 Apache-2.0 1 0 0 Updated May 13, 2026
View all repositories

People

@beonde

Top languages

Loading…

Uh oh!

There was an error while loading. Please reload this page.

Most used topics

Loading…

Uh oh!

There was an error while loading. Please reload this page.

You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.