Build on Veris

Issue and verify an agent in about five minutes.

1. Step 1

   Create an organization and an API key in the Veris Console. Keys are prefixed aegis_ and shown once.

2. Step 2

   Install the SDK (published on npm as v0.1.0):

   npm install @verisaegis/sdk

3. Step 3

   Issue a passport for your agent:

   import { AegisClient } from '@verisaegis/sdk';
   
   const client = new AegisClient({ apiKey: process.env.AEGIS_API_KEY! });
   
   const { passport, passportJwt } = await client.issue({
     agentName: 'CustomerSupportAgent',
     agentVersion: '1.0.0',
     modelFamily: 'claude-sonnet',
     deploymentEnv: 'production',
     jurisdiction: 'US',
     permittedActions: ['read:customer_records', 'send:support_response'],
     deniedActions: ['write:billing_records', 'delete:customer_data'],
     requiresHumanApproval: ['process:refund'],
   });
   
   console.log(passport.passportId); // ap_...

4. Step 4

   Verify an action before the agent performs it:

   const decision = await client.verify({
     passportId: passport.passportId,
     requestedCapabilities: ['read:customer_records'],
     riskLevel: 'MEDIUM',
     relyingParty: 'support-api',
   });
   
   if (decision.decision !== 'ALLOW') throw new Error(decision.decision);

POST /api/public/aegis/issue registers an agent, derives its behavioral baseline hash, and returns a passport together with a signed JWT.

POST https://verisaegis.com/api/public/aegis/issue
Authorization: Bearer aegis_...
Content-Type: application/json

{
  "agentName": "CustomerSupportAgent",
  "agentVersion": "1.0.0",
  "modelFamily": "claude-sonnet",
  "deploymentEnv": "production",
  "jurisdiction": "US",
  "permittedActions": ["read:customer_records", "send:support_response"],
  "deniedActions": ["write:billing_records", "delete:customer_data"],
  "requiresHumanApproval": ["process:refund"]
}

→ 200 OK
{
  "passport": {
    "passportId": "ap_oq5ZqfWWKGtpdFdkbM6c24yAHF",
    "agentId": "agt_...",
    "behavioralBaselineHash": "54f9ad69...",
    "trustScore": 850,
    "trustTier": "TRUSTED",
    "passport_jwt": "eyJhbGciOiJFUzI1NiIs..."
  },
  "passportJwt": "eyJhbGciOiJFUzI1NiIs..."
}

Capability precedence is absolute: a denied action can never be granted, and actions in requiresHumanApproval always resolve to REVIEW.

Every issued passport includes a signed JWT (ES256), returned as passportJwt at the top level of the issue response and as passport_jwt inside the passport object. It uses standard JWS compact serialization: header.payload.signature.

{ "alg": "ES256", "typ": "JWT", "kid": "kid_937ce495367ebd11" }

{
  "iss": "https://verisaegis.com",
  "sub": "ap_oq5ZqfWWKGtpdFdkbM6c24yAHF",
  "aud": "veris-relying-party",
  "iat": 1785792210,
  "exp": 1817328210,
  "jti": "ap_oq5ZqfWWKGtpdFdkbM6c24yAHF",
  "veris": {
    "version": "1.0",
    "agentId": "agt_...",
    "agentName": "CustomerSupportAgent",
    "agentVersion": "1.0.0",
    "modelFamily": "claude-sonnet",
    "orgId": "org_...",
    "deploymentEnv": "production",
    "jurisdiction": "US",
    "capabilities": {
      "permitted": ["read:customer_records", "send:support_response"],
      "denied": ["write:billing_records", "delete:customer_data"],
      "requiresHumanApproval": ["process:refund"]
    },
    "behavioralBaselineHash": "54f9ad69...",
    "policyFramework": "NIST_AI_RMF_1.0",
    "initialTrustScore": 850,
    "initialTrustTier": "TRUSTED"
  }
}

Why it matters

A passport can be verified by anyone, offline, without calling the Veris API or trusting our database. Verification requires only the public key from the JWKS endpoint — so an air-gapped service, an edge proxy, or a counterparty who has never heard of us can still confirm the passport is authentic.

Verifying with a standard library

import { jwtVerify, createRemoteJWKSet } from 'jose';

const JWKS = createRemoteJWKSet(
  new URL('https://verisaegis.com/api/public/aegis/.well-known/jwks.json')
);

const { payload } = await jwtVerify(passportJwt, JWKS, {
  issuer: 'https://verisaegis.com',
});

console.log(payload.veris.capabilities.permitted);

Veris standardizes the trust evidence. The scoring model is a reference implementation you can replace.

Reference scoring model

trustScore =
  0.30 × identity +
  0.25 × behavioral +
  0.20 × compliance +
  0.15 × historical +
  0.10 × environmental

TRUSTED ≥ 850 · ELEVATED ≥ 650 · STANDARD ≥ 400 · LOW ≥ 200

Protocols that achieve broad adoption standardize formats, identities, signatures, and verification — not reputation or risk models. TLS specifies how a certificate is structured and verified; it does not tell a browser which authorities to trust.

Revoke a compromised or retired agent instantly. Revocation is reflected in the next /verify call; it cannot be observed by offline JWT verification alone.

POST https://verisaegis.com/api/public/aegis/revoke
Authorization: Bearer aegis_...

{ "passportId": "ap_...", "reason": "key_compromise" }

Attestations record evidence about an agent's behavior over time — incidents, reviews, and third-party assessments — and feed the time-decayed historical component.

POST https://verisaegis.com/api/public/aegis/attest
Authorization: Bearer aegis_...

{
  "passportId": "ap_...",
  "attestationType": "INCIDENT",
  "severity": "LOW",
  "description": "Rate limit exceeded during batch run"
}

The official TypeScript SDK is published on npm as @verisaegis/sdk (v0.1.0), MIT licensed.

npm install @verisaegis/sdk

import { AegisClient } from '@verisaegis/sdk';

const client = new AegisClient({ apiKey: process.env.AEGIS_API_KEY! });

Source, the reference verifier, and the protocol specification live in the open-source repository.