Chancery

Chancery

Identity provider for AI agents — scoped delegation and instant revocation

Free - Open-source (Apache-2.0). Self-hosted; binaries available via Homebrew, Docker, or built from source. Free to use.

Visit Website

About Chancery

Chancery is a self-hosted identity provider for AI agents. It issues distinct agent identities, enforces scoped delegation (authority can only narrow), performs in-path MCP enforcement, supports instant revocation that takes effect on the agent's next action, and maintains a tamper‑evident audit trail. Distributed as a single Go binary with Apache-2.0 licensing; binaries are cosign-signed and ship an SBOM.

Key Features

  • Per-agent identity registry (distinct identities per agent)
  • Scoped delegation — authority can only be narrowed when delegated
  • In-path MCP enforcement to constrain capabilities during calls
  • Instant revocation that takes effect on the agent's next action
  • Tamper-evident, external audit trail; binaries cosign-signed and ship an SBOM

Who is this for?

Developers and platform/security engineers building or operating AI agents and tools that require per-agent identity, scoped authorization, and auditability.

Comments (0)

No comments yet

Be the first to share your thoughts!

Sign in to join the conversation

Sign In

Stats

Upvotes1
Comments0
Views0

Pricing

Free

Open-source (Apache-2.0). Self-hosted; binaries available via Homebrew, Docker, or built from source. Free to use.

Platforms

apiweb

Tech Stack

GoDockerHomebrewcosignGitHub OIDCSBOM

Tags

#identity#ai-agent#delegation#revocation#audit#self-hosted#go#cosign