rfc-9421

HTTP Message Signatures (RFC 9421) in Go

A node package for signing and verifying HTTP messages as per RFC 9421 - HTTP Message Signatures specification

A library implementing the signing and verification of HTTP requests in compliance with the RFC 9421 HTTP Message Signatures standard.

Verify and sign AI agent HTTP traffic in Python — RFC 9421 · Web Bot Auth · AAuth

Authenticate to ICP canisters over HTTP (Proof of Concept)

Example of a A-CUBE webhook server written in Typescript

An honest, kill-rate-validated conformance checker for the Universal Commerce Protocol (UCP). Browser, pip, or CI. REST + MCP. Free & open source. Unofficial.

Open-source edge layer of Paperward — Cloudflare Worker that detects AI agent traffic via Web Bot Auth (RFC 9421) and charges per-fetch via x402 (Coinbase facilitator, USDC on Base).

Merchant-side trust gateway for AI shopping agents. One API verifies Visa Trusted Agent Protocol, Google AP2 v0.2, and IETF Web Bot Auth (real ChatGPT traffic) — RFC 9421, Ed25519, SD-JWT.

Reference PHP webhook receiver application for Dash webhooks.

A runnable Open Cloud Mesh (OCM) peer in Go, focused on a strict, WebDAV-centered subset of the protocol.

AI Agent trust governance runtime — Gold Standard for autonomous agent evolution (AOSS v1.0). Ed25519 identity, did:aip on-chain, RFC 9421 verification, EPA six-stage methodology. 面向 AI Agent 的信任治理运行时。

Official JavaScript and TypeScript SDK for AgentBouncer

India-first agentic-commerce layer that makes any Razorpay merchant discoverable, quotable, negotiable and buyable by AI agents - every rupee bounded, gated and auditable. Razorpay AI Buildathon 2026 · Track 1.

Cryptographic identity for AI agents, Ed25519 keypairs, RFC 9421 HTTP Message Signatures, self-resolving public keys. Reference implementation of envoys.me.

JavaScript library for HTTP Message Signatures <https://www.rfc-editor.org/rfc/rfc9421.html>

Attested windowed disclosure for telecom network APIs — requesters state a predicate, floor and nonce; operators answer with a signed, nonce-bound, expiring boolean, never a raw value. Aggregators meter but cannot read. Standards staging for the CAMARA and IETF tracks.