Give your agents
a real-world identity.

# pip install eqhoids
from eqhoids import EqhoIDs
client = EqhoIDs(api_key="eqhoai_sk_YOUR_KEY")

# 1. Register an agent — gets Ed25519 keypair
agent = client.trust.register_agent("deploy-bot",
    agent_type="developer")

# 2. Sign an action before executing it
action = {"action": "deploy", "env": "prod"}
sig = client.trust.sign(agent["agent_id"], action)

# 3. Verify anywhere — different service, same truth
result = client.trust.verify(agent["agent_id"],
    action, sig["signature"])
assert result["valid"]  # True

# Reviewer agent signs its approval
review = {"pr": 42, "verdict": "approved",
    "reviewer": reviewer_id}
sig = client.trust.sign(reviewer_id, review)

# Send signed message to deployer
client.trust.send_message(reviewer_id, deployer_id,
    {"review": review, "sig": sig["signature"]})

# --- Deployer side (different machine) ---
msg = client.trust.verify(reviewer_id,
    review, sig["signature"])

if msg["valid"] and review["verdict"] == "approved":
    deploy_to_prod()  # cryptographically authorized

# Subscribe once — gives you a secret for HMAC
wh = client.webhooks.create(
    url="https://your.app/hooks/eqhoids",
    events=["trust.agent_registered",
        "trust.signature_created"])
SECRET = wh["secret"].encode()

# Your Flask receiver (HMAC verify)
import hmac, hashlib
from flask import request

@app.post("/hooks/eqhoids")
def handler():
    sig = request.headers["X-EqhoIDs-Signature"]
    expected = hmac.new(SECRET, request.data,
        hashlib.sha256).hexdigest()
    if not hmac.compare_digest(sig, expected):
        return "invalid", 401
    process(request.json)  # trusted event
    return "ok"