trust — open-source software health

npm · Go · crates.io

96Exceptionalhealth index

AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.

Python★ 6,138↓ 14.7K/moAug 28, 2026

MITAug 28, 2026 · metrics 2.10.0

npm · crates.io

90Excellenthealth index

aeoess/agent-passport-system

Open protocol for AI agent accountability. Cryptographic identity, scoped delegation that narrows per hop, gateway enforcement, signed receipts for every action. TypeScript reference, Apache-2.0.

TypeScript★ 45↓ 2,434/moSep 10, 2026

Apache-2.0Sep 10, 2026 · metrics 2.10.0

87Excellenthealth index

pilot-protocol/pilotprotocol

Pilot Protocol: The Internet of Agents

Go · Shell★ 138Sep 13, 2026

AGPL-3.0Sep 13, 2026 · metrics 2.10.0

PyPI · npm · crates.io +1

86Excellenthealth index

QWED-AI/qwed-verification

Open-source AI verification infrastructure for deterministic verification of LLM outputs, tool calls, code, schemas, and agent state before production execution.

Python★ 58↓ 764/moSep 18, 2026

Apache-2.0Sep 18, 2026 · metrics 2.10.0

npm

86Excellenthealth index

emiliaprotocol/emilia-protocol

Authority control plane for autonomous work. EMILIA Gate enforces finite customer-owned mandates at protected executor boundaries; the open protocol keeps evidence verifiable.

TypeScript · HTML★ 649↓ 1,109/moSep 5, 2026

Apache-2.0Sep 5, 2026 · metrics 2.10.0

PyPI

84Excellenthealth index

agentrust-io/agent-manifest

Agent Manifest SDK. Hardware-anchors all 10 artifacts defining an agent at deployment. Python and TypeScript.

Python★ 19↓ 4,734/moSep 15, 2026

Apache-2.0Sep 15, 2026 · metrics 2.10.0

PyPI

80Excellenthealth index

agentscore/python-commerce

AgentScore Commerce — Python merchant SDK for agent commerce: identity, payment, discovery, Stripe multichain.

Python★ 0↓ 1,555/moSep 16, 2026

MITSep 16, 2026 · metrics 2.10.0

PyPI · npm

80Excellenthealth index

alizahidraja/isnad

Grade every agent, scraper and model in a claim's chain — provenance, trust scoring and audit evidence for LLM pipelines

Python★ 53↓ 2,089/moOct 21, 2026

Apache-2.0Oct 21, 2026 · metrics 2.10.0

PyPI · Maven

80Excellenthealth index

jawah/wassima

No more certifi! System trust store at hand. In Pure Python.

Python★ 24↓ 1.4M/moOct 20, 2026

MITOct 20, 2026 · metrics 2.10.0

PyPI · npm

80Excellenthealth index

smilinTux/skcapstone

SKCapstone — The sovereign agent framework. CapAuth backbone. Cloud 9 trust. SKMemory persistence. Same agent, same bond, same context — everywhere. Runs from ~/.

Python★ 1↓ 24.5K/moSep 12, 2026

GPL-3.0Sep 12, 2026 · metrics 2.10.0

npm · crates.io · Go

80Excellenthealth index

zerkerlabs/treeship

Portable trust receipts for agent workflows. Signed, chained, verifiable.

Rust★ 13↓ 10.2K/moOct 1, 2026

Apache-2.0Oct 1, 2026 · metrics 2.10.0

crates.io · npm

78Goodhealth index

agentidentitytrustprotocol/aitp-rs

No repository description published.

Rust★ 0↓ 15.5K/moOct 20, 2026

Apache-2.0Oct 20, 2026 · metrics 2.10.0

npm

75Goodhealth index

forgesworn/bray

Trust-aware Nostr MCP server for AI agents and humans. Verification, proximity, and access woven into every interaction.

TypeScript★ 1↓ 2,135/moSep 13, 2026

MITSep 13, 2026 · metrics 2.10.0

73Goodhealth index

pilot-protocol/trustedagents

Pilot Protocol trusted-agents plugin — embedded auto-trust allowlist + IsTrusted() gate

Go★ 0Oct 20, 2026

AGPL-3.0Oct 20, 2026 · metrics 2.10.0

crates.io · PyPI

71Goodhealth index

dp-web4/web4

Web4: an open standard for verifiable AI presence — LCT identity, T3/V3 trust tensors, MRH context, ATP/ADP. Rust + Python SDKs on crates.io/PyPI. AGPL-3.0-or-later.

Python★ 12↓ 70/moSep 19, 2026

AGPL-3.0Sep 19, 2026 · metrics 2.10.0

npm

71Goodhealth index

polygraphso/litmus

Behavioral litmus harness for MCP servers — the open @polygraphso/litmus package (CLI, library, MCP server).

TypeScript★ 8↓ 350/moSep 14, 2026

Apache-2.0Sep 14, 2026 · metrics 2.10.0

PyPI

69Goodhealth index

veldtlabs/veldt-kya

Runtime control, security, and governance for AI agents — decide what an agent may do at the moment it acts, revoke that authority instantly, and keep tamper-evident evidence of every decision.

Python★ 3↓ 5,683/moSep 8, 2026

Custom licenseSep 8, 2026 · metrics 2.10.0

PyPI

65Goodhealth index

YugantM/hvtracker

AI agent & MCP trust registry — independent, evidence-based trust scores for 1.3K+ open-source AI agents and MCP servers. Runtime-trust calibrated (MCP, dependencies, provenance drift), with side-by-side comparison and embeddable live badges. Ranked by verifiable signals, not hype.

HTML★ 5Sep 13, 2026

MITSep 13, 2026 · metrics 2.10.0

npm · PyPI

63Moderatehealth index

maxfain/basedagents

An open registry for discovering, verifying, and trusting AI agents.

TypeScript★ 0↓ 913/moSep 16, 2026

Apache-2.0Sep 16, 2026 · metrics 2.10.0

63Moderatehealth index

pilot-protocol/handshake

Pilot Protocol handshake plugin — node-to-node trust negotiation, accept/deny flow, trust persistence (port 444)

Go★ 0Sep 5, 2026

AGPL-3.0Sep 5, 2026 · metrics 2.10.0

PyPI

62Moderatehealth index

veracium-ai/Veracium

Provenance-aware memory for AI agents.

Python★ 9↓ 3,182/moSep 15, 2026

MITSep 15, 2026 · metrics 2.10.0

npm

60Moderatehealth index

dot-skill/skillerr

Open .skill Protocol - a sealed, inspectable package format for AI agent skills. Reference implementation: skillerr.

TypeScript · JavaScript★ 3↓ 774/moSep 14, 2026

Apache-2.0Sep 14, 2026 · metrics 2.10.0

npm

59Moderatehealth index

hachure-org/spec

Hachure — an open trust format. Specification, normative schemas, and conformance test vectors. npm: hachure

JavaScript★ 0↓ 29.8K/moSep 12, 2026

MITSep 12, 2026 · metrics 2.10.0

PyPI

57Moderatehealth index

MoltyCel/moltrust-mcp-server

MCP server for MolTrust — Trust Infrastructure for AI Agents

Python★ 4↓ 2,689/moOct 20, 2026

MITOct 20, 2026 · metrics 2.10.0

npm · PyPI

54Moderatehealth index

YugantM/hvtracker-mcp

MCP server for HVTracker trust checks.

Python · JavaScript★ 1↓ 520/moSep 13, 2026

MITSep 13, 2026 · metrics 2.10.0

npm

54Moderatehealth index

davidnichols-ops/trustcard

Cryptographic trust infrastructure for MCP servers — signed manifests, TOFU pinning, two-gate enforcement, and the "npm audit" scanner.

JavaScript★ 4↓ 1,290/moSep 13, 2026

MITSep 13, 2026 · metrics 2.10.0

34At Riskhealth index

dedis/cothority

Scalable collective authority

Go★ 430Oct 17, 2026

Custom licenseOct 17, 2026 · metrics 2.10.0

npm

34At Riskhealth index

lemmaflow/lemmaflow

Trust engine for production software. Free local scans for PII, secrets, privacy, GDPR and data retention — plus an AI-native audit. npx -y lemmaflow scan

JavaScript★ 2Sep 21, 2026

Apache-2.0Sep 21, 2026 · metrics 2.10.0

npm

34At Riskhealth index