opena2a/aim-server repository overview

⁠AIM Server

Backend API server for Agent Identity Management (AIM)⁠ -- the open-source NHI platform for AI agents.

⁠Quick Start

docker pull opena2a/aim-server

Or use the one-liner installer:

curl -sSL https://raw.githubusercontent.com/opena2a-org/agent-identity-management/main/scripts/quickstart.sh | bash

⁠What AIM Does

• Cryptographic identity -- Ed25519 keypairs and OAuth 2.0 token endpoint for machine-to-machine auth
• Capability enforcement -- declare what each agent can do; block everything else at runtime
• MCP attestation -- verify Model Context Protocol servers, detect tool drift
• NHI governance -- ownership tracking, lifecycle management, shadow agent discovery, ABOM export
• Trust scoring -- 8-factor algorithm evaluating agent trustworthiness in real time
• Security policies -- monitoring or strict mode, data exfiltration detection, just-in-time access

⁠Image Verification

All images are signed with cosign⁠ (keyless, OIDC-based):

cosign verify opena2a/aim-server:latest \
  --certificate-identity-regexp="https://github.com/opena2a-org/agent-identity-management" \
  --certificate-oidc-issuer="https://token.actions.githubusercontent.com"

⁠Tags

⁠Links

• GitHub⁠
• Documentation⁠
• Python SDK⁠ -- pip install aim-sdk
• License: Apache-2.0⁠