Build with AI Identity

Your App  →  AI Identity Gateway  →  LLM Provider (OpenAI, Anthropic, Gemini, Cohere, Mistral, etc.)
                     │
                     ├─ Validate agent identity
                     ├─ Check policy (rate limit, model access, budget)
                     ├─ Inject audit headers (X-Agent-ID, X-Request-ID)
                     ├─ Log request metadata
                     └─ Forward to upstream provider

from openai import OpenAI

# Point the OpenAI client at the AI Identity gateway
client = OpenAI(
    base_url="https://gateway.ai-identity.co/v1",
    api_key="aid_sk_your_agent_key",
)

response = client.chat.completions.create(
    model="gpt-4o",
    messages=[{"role": "user", "content": "Summarize today's news"}],
)
print(response.choices[0].message.content)

from openai import OpenAI

# Same gateway, different model — Anthropic Claude
client = OpenAI(
    base_url="https://gateway.ai-identity.co/v1",
    api_key="aid_sk_your_agent_key",
)

response = client.chat.completions.create(
    model="claude-sonnet-4-20250514",
    messages=[{"role": "user", "content": "Explain quantum computing"}],
)
print(response.choices[0].message.content)

import OpenAI from "openai";

const client = new OpenAI({
  baseURL: "https://gateway.ai-identity.co/v1",
  apiKey: "aid_sk_your_agent_key",
});

// Works with any supported model — OpenAI, Anthropic, Gemini, etc.
const response = await client.chat.completions.create({
  model: "gemini-2.5-pro",  // or "gpt-4o", "claude-sonnet-4-20250514", etc.
  messages: [{ role: "user", content: "Summarize today's news" }],
});
console.log(response.choices[0].message.content);

from langchain_openai import ChatOpenAI

llm = ChatOpenAI(
    model="gpt-4o",
    base_url="https://gateway.ai-identity.co/v1",
    api_key="aid_sk_your_agent_key",
)

response = llm.invoke("What is AI Identity?")
print(response.content)

import os
os.environ["OPENAI_API_BASE"] = "https://gateway.ai-identity.co/v1"
os.environ["OPENAI_API_KEY"] = "aid_sk_your_agent_key"

from crewai import Agent, Task, Crew

researcher = Agent(
    role="Researcher",
    goal="Find the latest AI governance news",
    backstory="You are an expert AI policy analyst.",
    llm="gpt-4o",
)

task = Task(
    description="Summarize recent developments in AI regulation",
    expected_output="A concise briefing document",
    agent=researcher,
)

crew = Crew(agents=[researcher], tasks=[task])
result = crew.kickoff()
print(result)

from autogen import AssistantAgent, UserProxyAgent

config_list = [{
    "model": "gpt-4o",
    "base_url": "https://gateway.ai-identity.co/v1",
    "api_key": "aid_sk_your_agent_key",
}]

assistant = AssistantAgent(
    name="assistant",
    llm_config={"config_list": config_list},
)

user_proxy = UserProxyAgent(
    name="user",
    human_input_mode="NEVER",
    code_execution_config=False,
)

user_proxy.initiate_chat(
    assistant, message="Explain how AI identity governance works."
)

# List your agents
curl https://gateway.ai-identity.co/v1/agents \
  -H "Authorization: Bearer YOUR_API_KEY"

# Create a chat completion through the gateway (any provider)
curl -X POST https://gateway.ai-identity.co/v1/chat/completions \
  -H "Authorization: Bearer aid_sk_your_agent_key" \
  -H "Content-Type: application/json" \
  -d '{
    "model": "gemini-2.5-pro",
    "messages": [{"role": "user", "content": "Hello!"}]
  }'

# Check agent usage and forensic logs
curl https://gateway.ai-identity.co/v1/agents/ag_abc123/usage \
  -H "Authorization: Bearer YOUR_API_KEY"

# Organization-level operations
curl https://gateway.ai-identity.co/v1/agents \
  -H "Authorization: Bearer aid_org_your_org_key"

# Agent-level LLM requests
curl -X POST https://gateway.ai-identity.co/v1/chat/completions \
  -H "Authorization: Bearer aid_sk_your_agent_key" \
  -H "Content-Type: application/json" \
  -d '{"model": "claude-sonnet-4-20250514", "messages": [{"role": "user", "content": "Hi"}]}'

curl -X POST https://api.ai-identity.co/v1/policies \
  -H "Authorization: Bearer aid_org_your_org_key" \
  -H "Content-Type: application/json" \
  -d '{
    "name": "support-agents-read-only-crm",
    "effect": "allow",
    "conditions": {
      "agent.team": "support",
      "agent.environment": "prod",
      "request.tool": { "in": ["crm.read", "kb.search"] },
      "request.hour_utc": { "between": [13, 23] }
    },
    "limits": { "rpm": 60, "monthly_usd_cap": 500 }
  }'

# See how a proposed policy would have ruled on the last 24h of requests
curl -X POST https://api.ai-identity.co/v1/policies/dry-run \
  -H "Authorization: Bearer aid_org_your_org_key" \
  -H "Content-Type: application/json" \
  -d '{
    "policy": { /* same body as POST /v1/policies */ },
    "window": "24h"
  }'

# Returns per-request decisions: allow / deny / would-change
# so you can confirm the policy is safe before enforcing it.

curl -X POST https://api.ai-identity.co/v1/policies \
  -H "Authorization: Bearer aid_org_your_org_key" \
  -H "Content-Type: application/json" \
  -d '{
    "name": "refunds-require-approval",
    "effect": "require_approval",
    "conditions": { "request.tool": "billing.refund" },
    "approval": {
      "reviewer_team": "finance-ops",
      "timeout_seconds": 900,
      "on_timeout": "deny"
    }
  }'

# 1. Get a session's signed attestation envelope
curl https://api.ai-identity.co/v1/attestations/sess_8f2a4c71b9 \
  -H "Authorization: Bearer aid_org_your_org_key" \
  -o attestation.json

# 2. Fetch the public JWKS — no auth required
curl https://api.ai-identity.co/.well-known/jwks.json -o jwks.json

# The verification CLI is a single Python file, stdlib-only for chain checks.
# Install:
pip install cryptography   # only needed for attestation signature verification
cp cli/ai_identity_verify.py /usr/local/bin/ai_identity_verify
chmod +x /usr/local/bin/ai_identity_verify

# Verify a forensics export's HMAC chain of custody:
export AI_IDENTITY_HMAC_KEY='your-hmac-secret'
ai_identity_verify chain audit_export.json --verbose

# Verify a forensics report signature:
ai_identity_verify report forensics_report.json

# Verify a signed session attestation envelope (no server required):
ai_identity_verify attestation attestation.json --jwks jwks.json

curl -X POST https://api.ai-identity.co/v1/audit/sinks \
  -H "Authorization: Bearer aid_org_your_org_key" \
  -H "Content-Type: application/json" \
  -d '{
    "kind": "webhook",
    "url": "https://siem.internal.example.com/ingest/ai-identity",
    "events": ["policy.deny", "approval.decision", "shadow_agent.detected", "session.close"],
    "signing": { "jwks": "https://api.ai-identity.co/.well-known/jwks.json" }
  }'

curl -X POST https://api.ai-identity.co/v1/compliance/exports \
  -H "Authorization: Bearer aid_org_your_org_key" \
  -H "Content-Type: application/json" \
  -d '{
    "profile": "eu_ai_act",
    "window": { "start": "2026-01-01", "end": "2026-03-31" }
  }'

# Response contains a download URL for the signed bundle.
# Profiles live today (stub endpoints): soc2, eu_ai_act, nist_ai_rmf
# Additional profiles on the near-term roadmap: iso_27001, hipaa

# Agents
GET    /v1/agents                         # List all agents
POST   /v1/agents                         # Create a new agent
GET    /v1/agents/:id                     # Get agent details
PATCH  /v1/agents/:id                     # Update an agent
DELETE /v1/agents/:id                     # Delete an agent

# Keys
POST   /v1/agents/:id/keys                # Create an agent key
GET    /v1/agents/:id/keys                # List agent keys
DELETE /v1/agents/:id/keys/:key_id        # Revoke a key

# Policies
GET    /v1/policies                       # List policies
POST   /v1/policies                       # Create a policy
PATCH  /v1/policies/:id                   # Update a policy
POST   /v1/policies/dry-run               # Dry-run against live traffic

# Shadow agents
GET    /v1/shadow-agents                  # List detected shadow agents
POST   /v1/shadow-agents/:id/register     # Register with default policy
POST   /v1/shadow-agents/:id/block        # Block all future requests
POST   /v1/shadow-agents/:id/dismiss      # Dismiss the detection

# Approvals (HITL)
GET    /v1/approvals                      # List pending approvals
POST   /v1/approvals/:id/decide           # Approve / reject with reasoning

# Forensics / Logs
GET    /v1/agents/:id/logs                # Get agent request logs
GET    /v1/agents/:id/usage               # Get usage summary
GET    /v1/attestations/:session_id       # Get signed session attestation
GET    /.well-known/jwks.json             # Public JWKS for verification

# Compliance
POST   /v1/compliance/exports             # Generate an evidence bundle
GET    /v1/compliance/exports/:id         # Download a generated bundle

# Audit sinks (SIEM forwarding)
POST   /v1/audit/sinks                    # Configure a webhook sink
GET    /v1/audit/sinks                    # List configured sinks

# Observability
GET    /metrics                           # Prometheus metrics (internal)

# Gateway (OpenAI-compatible)
POST   /v1/chat/completions               # Proxied chat completion
POST   /v1/embeddings                     # Proxied embeddings