AVAILABLE NOW

Agent Framework

Cloud Identity integration for Microsoft Agent Framework (successor to AutoGen and Semantic Kernel). Add identity tools, middleware, and trust-gated workflows to your multi-agent systems.

Install (Early Access)
$git clone https://github.com/citizenofthecloud/agent-framework.git
$pip install citizenofthecloud-agentframework
Early access — clone from GitHub for the latest version. PyPI package coming soon.

Add identity to your Agent Framework agents

Drop Cloud Identity tools and middleware into any Agent Framework agent. Verify participants, enforce trust policies across multi-agent workflows, and sign outbound requests.

Add Identity ToolsPython
from autogen_agentchat.agents import AssistantAgent from citizenofthecloud_agentframework import cloud_identity_tools # Get all identity tools tools = cloud_identity_tools() agent = AssistantAgent( name="security_agent", model_client=model_client, tools=tools, system_message="Verify agents before sharing data.", )
Add Identity MiddlewarePython
from citizenofthecloud_agentframework import ( CloudIdentityMiddleware, CloudIdentityFnMiddleware, ) # AgentMiddleware — intercepts all agent messages agent_mw = CloudIdentityMiddleware( minimum_trust=0.6, require_covenant=True, ) # FunctionMiddleware — wraps tool calls with verification fn_mw = CloudIdentityFnMiddleware( allowed_autonomy=["agent", "self-directing"], ) agent = AssistantAgent( name="guarded_agent", model_client=model_client, agent_middlewares=[agent_mw], function_middlewares=[fn_mw], )
Multi-Agent WorkflowPython
from citizenofthecloud_agentframework import verified_workflow # Define a workflow where every participant is verified @verified_workflow(minimum_trust=0.7) async def research_pipeline(agents, query): # All agents verified before workflow starts researcher, analyst, writer = agents data = await researcher.run(query) analysis = await analyst.run(data) report = await writer.run(analysis) return report

Identity tools and middleware

Tools work as standard Agent Framework function tools. Middleware intercepts agent messages and tool calls for automatic identity enforcement.

Tools

verify_cloud_agent
Verify an agent’s identity using Cloud ID, timestamp, and Ed25519 signature
lookup_cloud_agent
Look up an agent’s public profile and passport from the registry
check_agent_trust
Check an agent’s trust score against an optional minimum threshold
cloud_identity_tools()
Returns all three tools as a list for easy agent setup

Middleware

CloudIdentityMiddleware
AgentMiddleware — intercepts messages and verifies sender identity before delivery
CloudIdentityFnMiddleware
FunctionMiddleware — wraps tool calls with identity verification and trust checks

HTTP Client

CloudIdentityHTTPClient
Auto-signs outbound HTTP requests with X-Cloud-* headers

Environment variables

Set these environment variables to enable request signing and middleware. Verification tools work without credentials.

VariableRequiredDescription
CLOUD_IDFor signingYour agent’s Cloud ID (cc-...). Required for signing outbound requests.
CLOUD_PRIVATE_KEYFor signingEd25519 private key in PEM format. Required alongside CLOUD_ID.

Ready to get started?

Clone the repo, register an agent, and add identity verification to your Agent Framework workflows.