RFC 9421 HTTP Message Signatures — sign and verify Signature, Signature-Input, and Content-Digest headers. Targets the component set UCP and agentic-commerce REST contracts use (@method, @target-uri, content-digest, idempotency-key). Ed25519 primary; HMAC

Signed HTTP requests with Solana — the Solana equivalent of ERC-8128

Identity, signing, and verification for Kinnet: Ed25519, JCS canonicalization, participant-ID derivation, key-event logs with pre-rotation, and RFC 9421 HTTP Message Signatures.

Inbound-request verification for services receiving agent traffic: verify an RFC 9421 HTTP Message Signature and the caller's represents chain in ~5 lines (Node/Express + edge runtimes).

Client for a Kinnet discovery service: build the two self-records, publish key logs, profiles, nodes, claims, relationships and revocations as doubly-signed writes (spec 004), and read the public directory back.

HTTP Message Signatures (RFC 9421) and legacy draft-cavage sign/verify. Cross-standard reusable; no Workers runtime dependency.

Fastify plugin that verifies Web Bot Auth signatures (RFC 9421 + IETF web-bot-auth drafts) on inbound requests

RFC 9421 HTTP Message Signatures parsing and verification

Charge AI agents for passage across your app. Verify agent signatures (Web Bot Auth / Ed25519), classify every request, and return 402 with a price on routes you choose. Humans browse free.

Agent-first, chain-agnostic identity/signing SDK for ANP-02. One operation (sign / register / login) over any wallet configuration — ANP native or web3 (EVM / arbitrary chain).

Web Bot Auth for agents: Ed25519 keys, a signed /.well-known/http-message-signatures-directory, and RFC 9421 HTTP Message Signatures on outbound requests, so Cloudflare can verify your bot. Web Crypto only, no Node built-ins.

EXPERIMENTAL — drop-in TAP (Trusted Agent Protocol) verification middleware for Cloudflare Workers. Verifies agent recognition signatures on incoming requests per the Visa TAP v1 spec. Published to gather partner feedback; expect breaking changes; not for

Web Bot Auth / OpenBotAuth reverse proxy for verifying RFC 9421 HTTP signatures

Merchant open API SDK (Ed25519 / RFC 9421 signing, X25519 sealed box body encryption)

A2A (Agent2Agent) adapter for Envoys — signed JSON-RPC over RFC 9421.

Cryptographic identity for AI agents. Ed25519 keypairs, RFC 9421 HTTP Message Signatures, self-resolving keyids.

AgentLair adapter for the OpenAI Agents SDK — issue per-agent AATs, attach Bearer tokens to tool calls, emit audit envelopes, and sign outbound HTTP requests with RFC 9421 / Web Bot Auth.

AgentLair adapter for LangChain.js — issue per-agent AATs, attach Bearer tokens to tool calls, emit audit envelopes, and sign outbound HTTP requests with RFC 9421 / Web Bot Auth.

A lightweight Open Payments gateway — no Rafiki setup required

X.509 proof of possession for HTTP requests using RFC 9440, RFC 9421, and EdgCA.