360 Secure SkillHub
360 安全技能中心

AGNTCY Identity CLI

提供 identity CLI 与 Node 后端，用于在 AGNTCY 生态中创建和管理代理、MCP 服务器等身份，注册签发者、生成元数据、签发并发布徽章、验证可验证凭证。需 Docker 启动本地后端，并配置签发者地址与 IdP 客户端凭据；金库文件含私钥，属敏感数据。

jadiaconu
jadiaconu
热度 58.79
最近更新 2026-05-11 17:28:23
分类：安全依赖：代码执行 / 读写文件 / 第三方 API应用场景：工作流 / DevOps

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add agntcy-identity-cli
Metadata
description
AGNTCY Identity Issuer CLI and Node Backend for managing verifiable agent identities, metadata, and badges.
homepage
https://github.com/agntcy/identity
metadata
{"openclaw":{"emoji":"🪪","install":[{"id":"go","kind":"go","label":"Install via go install","module":"github.com/agntcy/identity/cmd/issuer"}],"requires":{"anyBins":["identity"],"env":["ISSUER_URL","CLIENT_ID","CLIENT_SECRET"],"config":["skills.entries.agntcy-identity.config.vaultPath"]}}}
name
agntcy-identity

AGNTCY Identity (Issuer CLI + Node Backend)

Use the identity CLI to create, manage, issue, and verify decentralized agent identities and badges within the AGNTCY ecosystem.

This tool enables:

  • Identity creation (Agents, MCP Servers, MASs)
  • BYOID onboarding (e.g., Okta-based identities)
  • Metadata generation
  • Badge issuance & publishing
  • Verifiable Credential (VC) verification

Requirements

  • Docker Desktop OR
    • Docker Engine v27+
    • Docker Compose v2.35+
  • Optional for demo:
    • Okta CLI
    • Ollama CLI

Core Commands

Vault Management

Manage cryptographic vaults and signing keys:

identity vault connect file -f ~/.identity/vault.json -v "My Vault" identity vault key generate

Issuer Management

Register and manage issuer configurations:

identity issuer register -o "My Organization" -c "$CLIENT_ID" -s "$CLIENT_SECRET" -u "$ISSUER_URL"

Metadata Management

Generate and manage identity metadata:

identity metadata generate -c "$CLIENT_ID" -s "$CLIENT_SECRET" -u "$ISSUER_URL"

Badge Issuance

Issue and publish badges (Verifiable Credentials):

identity badge issue mcp -u http://localhost:9090 -n "My MCP Server" identity badge publish

Verification

Verify published badges:

identity verify -f vcs.json

Running the Node Backend

Start locally using Docker:

git clone https://github.com/agntcy/identity.git cd identity ./deployments/scripts/identity/launch_node.sh

Or:

make start_node

Typical Workflow

  1. Install CLI
  2. Start Node Backend
  3. Create vault + keys
  4. Register Issuer
  5. Generate metadata
  6. Issue badge
  7. Publish badge
  8. Verify badge

Security notes (read before providing secrets)

  • ~/.identity/vault.json can contain signing key material and should be treated as a high-value secret. Use a dedicated test vault for evaluation; do not reuse production keys.
  • CLIENT_SECRET is a high-value secret. Only provide it after you have reviewed the code/binaries you will run and you are operating in a controlled environment.
  • Avoid pasting secrets into chat, logs, tickets, or issue trackers. Prefer secure secret injection.

Notes

  • The CLI binary name is identity.
  • Public issuer keys are exposed via: /v1alpha1/issuer/{common_name}/.well-known/jwks.json
  • Published VCs are accessible via: /v1alpha1/vc/{metadata_id}/.well-known/vcs.json
  • Supports Agents, MCP Servers, and MASs.
  • Follows decentralized identity standards (e.g., W3C DIDs).