CNSA 2.0 · Procurement deadline Jan 2027

Identity for AI agents.

Regulated enterprises and government programs need every agent action to trace to an accountable party. The Aethyr Agent Registry issues post-quantum signed credentials that bind each agent to its operator — verifiable offline, including in air-gapped environments.

Request a briefing Register an agent

Jan 2027 CNSA 2.0 deadline — new national security acquisitions must include post-quantum cryptography

FIPS 204 the finalized NIST standard behind every credential signature (ML-DSA-65)

0 network calls to verify — credentials check out fully offline, air-gap compatible

Issuance pipeline

How it works

Register

Receive

Get a signed credential with your agent's DID, capabilities, and operator binding. Post-quantum signed (ML-DSA-65).

Present

Your agent carries the credential and presents it to services. Every credential traces back to a responsible party.

Verify

Services check the credential using @aethyrai/ssi-verify. No API calls, no account — just math running locally.

Offline verification

For service providers

One line to verify an agent's identity.

npm install @aethyrai/ssi-verify

import { verifyCredential, AETHYR_ISSUER_PUBLIC_KEY } from '@aethyrai/ssi-verify';

const result = verifyCredential(credential, AETHYR_ISSUER_PUBLIC_KEY);
if (!result.valid) {
  // reject the agent
}

No network calls. No Aethyr account. Fully offline verification — suitable for air-gapped and disconnected environments.

Integration

API & CLI

Register an agent

curl -X POST https://registry.aethyr.cloud/v1/register \
  -H "Content-Type: application/json" \
  -d '{
    "agentName": "my-agent",
    "operatorName": "Jane Smith",
    "operatorEmail": "jane@example.com",
    "framework": "langchain",
    "tier": "basic",
    "capabilities": ["tool:web", "tool:code"],
    "namespace": "agent"
  }'

Evaluation registrations issue immediately — the credential and API key are returned in the response and delivered to the operator email.

Check agent status

curl https://registry.aethyr.cloud/v1/status/did:aethyr:agent:abc123

Retrieve credential

curl https://registry.aethyr.cloud/v1/credentials/REGISTRATION_ID

Revoke credential

curl -X POST https://registry.aethyr.cloud/v1/revoke \
  -H "Content-Type: application/json" \
  -d '{
    "credentialId": "REGISTRATION_ID",
    "reason": "Decommissioned",
    "apiKey": "YOUR_API_KEY"
  }'

Verify domain (organization verification)

# 1. Request a verification token
curl -X POST https://registry.aethyr.cloud/v1/verify-domain/initiate \
  -H "Content-Type: application/json" \
  -d '{
    "registrationId": "REGISTRATION_ID",
    "domain": "acme.com",
    "apiKey": "YOUR_API_KEY"
  }'

# 2. Add the DNS TXT record shown in the response
#    _aethyr-verify.acme.com → aethyr-verify=TOKEN

# 3. Confirm verification
curl -X POST https://registry.aethyr.cloud/v1/verify-domain/check \
  -H "Content-Type: application/json" \
  -d '{
    "registrationId": "REGISTRATION_ID",
    "apiKey": "YOUR_API_KEY"
  }'

Issuer DID document

curl https://registry.aethyr.cloud/.well-known/did.json

Evaluation & engagement

Access

Evaluation

No charge self-serve

Agent DID + signed credential
1-year validity, operator-initiated revocation
Post-quantum signature (ML-DSA-65)
Full API and CLI access

Enterprise & Government

Engagement-based provisioned with your Aethyr deployment

Organization verification with DNS domain proof
Agent identity integrated with platform governance and audit
Deployment options for air-gapped programs
Hardware attestation on the roadmap

Request a briefing

Open standards

Standards

W3C Verifiable Credentials 2.0 Credential format

W3C Decentralized Identifiers Agent identity

NIST FIPS 204 (ML-DSA-65) Post-quantum signatures

CNSA 2.0 Signature suite aligned; CMVP validation on roadmap