rfc9421

auth for agents–from the creator of `dotenv` and `dotenvx`

Rust implementation of IETF RFC 9421, http message signatures

An implementation of RFC 9421, HTTP Message Signatures

NSign (/ˈensaɪn/) is a set of .Net libraries for HTTP Message Signatures (RFC 9421).

A node package for signing and verifying HTTP messages as per RFC 9421 - HTTP Message Signatures specification

An implementation of HTTP Messages Signatures (RFC9421)

Relay and target for Oblivious DoH (ODoH) and ODoH-based Mutualized Oblivious DNS (ODoH-based μODNS; μODoH) supporting (anonymous) authenticated connection, written in Rust.

Verified-bot identity for AI agents (Web Bot Auth / RFC 9421), with a doctor that reports why a request was blocked.

Tamper-evident seals for Eloquent models (keyed MACs and signatures, key rotation, append-only ledger), idempotency keys, nonces and RFC 9421 HTTP message signatures.

HTTP Message Signatures (RFC 9421) for the Fetch API

Authenticate to ICP canisters over HTTP (Proof of Concept)

Example of a A-CUBE webhook server written in Typescript

🔐 Rust bridge: Visa TAP + MCP → AI agents with secure payment auth. RFC 9421 signatures, Ed25519 crypto, JWE encryption. Production-ready, 100% TAP compliant.

Lint web-bot-auth key directories - expired keys, wrong curves, http message signature checks etc

Drop-in middleware that detects AI bot traffic. Community-maintained signature database + RFC 9421 Web Bot Auth verification. Node + Python + Go. Apache-2.0.

A crypto wallet for autonomous agents. Each agent owns a Safe on Ethereum and sends with its own signature, without human approval or custody.

A vendor-neutral WIMSE (Workload Identity in Multi System Environments) reference implementation in Rust — WIT, WPT, RFC 9421 HTTP signatures, and mTLS/WIC.

Identify AI agents by Ed25519 signature (RFC 9421 / Web Bot Auth), enforce the access policies you set, meter every crossing, price agent traffic with HTTP 402, and serve a /.well-known/x402 manifest so agents can find what you sell. Humans are never charged. Hosted identity API plus zero-dependency Express middleware.

Signs and verifies HTTP messages under RFC 9421 and draft-cavage-http-signatures-12

💡Fork adding support for more signature algorithms.