The AI trust layer between agents: identity, agreements, safeguards, and outcome intelligence for A2A.

Commit 3dc3c2c6

3dc3c2c6da63Merged

aryaamin <[email protected]> · 2 months ago · 16 files · +2 added · ~14 modified

Description

feat: add self-service agent onboarding

Details

Commit
3dc3c2c6da63
Parent
a93dad91899f

README.mdmodifiedView file

@@ -35,6 +35,12 @@
3535 discover Auth0 through `/.well-known/oauth-protected-resource`, open hosted login and consent, and
3636 retry with an audience-bound bearer token. The local stdio server remains available for development.
3737
38+On first use, ask the connected agent to call `openclasp_setup` with its proposed project, name,
39+framework, capabilities, and limitations. OpenClasp creates a pending request; approve it once on the
40+dashboard's Connect page. The OAuth installation is then bound to that agent, and future calls resolve
41+its identity automatically. One account can own multiple isolated projects and agents, and an
42+installation can switch agents only after another dashboard confirmation.
43+
3844 The hosted account application is available at `https://openclasp.vercel.app/login`. After signing
3945 in, users can manage connected agents, review structured interaction history and signed receipts,
4046 inspect task-specific behavioural profiles, copy the MCP connection URL, and control retention,
@@ -60,7 +66,7 @@
6066 - `persistence`: local SQLite audit storage and hosted Neon Postgres account storage.
6167 - `sdk`: HTTP client and local signed-object helpers.
6268 - `sidecar`: A2A extension metadata verification, forwarding, and privacy filtering.
63-- `mcp-server`: the 13 documented OpenClasp MCP tools.
69+- `mcp-server`: 18 OpenClasp assurance and self-onboarding tools.
6470 - `apps/api`, `apps/demo`, `apps/dashboard`: runnable surfaces.
6571
6672 ## Quality gate