Chancery

Chancery

Identity provider for AI agents — scoped delegation and instant revocation

Free - Open-source (Apache-2.0). Self-hosted; binaries available via Homebrew, Docker, or built from source. Free to use.

Visit Website

About Chancery

Chancery is a self-hosted identity provider for AI agents. It issues distinct agent identities, enforces scoped delegation (authority can only narrow), performs in-path MCP enforcement, supports instant revocation that takes effect on the agent's next action, and maintains a tamper‑evident audit trail. Distributed as a single Go binary with Apache-2.0 licensing; binaries are cosign-signed and ship an SBOM.

Key Features

  • Per-agent identity registry (distinct identities per agent)
  • Scoped delegation — authority can only be narrowed when delegated
  • In-path MCP enforcement to constrain capabilities during calls
  • Instant revocation that takes effect on the agent's next action
  • Tamper-evident, external audit trail; binaries cosign-signed and ship an SBOM

Who is this for?

Developers and platform/security engineers building or operating AI agents and tools that require per-agent identity, scoped authorization, and auditability.

Comments (0)

No comments yet

Be the first to share your thoughts!

Sign in to join the conversation

Sign In