Stop AI Agents from
Breaking Your Budget|

import { AgentPass } from 'agent-pass';

// Initialize Agent-Pass with security configuration
const agentPass = new AgentPass({
  keyType: 'Ed25519',
  didMethod: 'did:key',
  security: {
    challengeTimeout: 300, // 5 minutes
    nonceLength: 32
  }
});

// 1. Create agent identity with cryptographic keys
const agent = await agentPass.createAgent({
  name: 'DataProcessingAgent',
  version: '1.0.0',
  capabilities: ['data:read', 'data:process']
});

console.log('Agent DID:', agent.did);
// Output: did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK

// 2. Controller issues capability credential with constraints
const credential = await agentPass.issueCredential(agent, {
  issuer: 'did:key:z6MkpTHR8VNsBxYAAWHut2Geadd9jSwuBV8xRoAnwWsdvktH',
  scopes: [
    'read:user-data',
    'write:processing-logs',
    'access:ml-models'
  ],
  constraints: {
    timeLimit: '24h',           // Valid for 24 hours
    ipRange: '192.168.1.0/24',  // Network restriction
    rateLimits: {
      requestsPerMinute: 100,
      dataProcessingMB: 500
    }
  },
  metadata: {
    purpose: 'Data processing and analysis',
    compliance: ['GDPR', 'SOC2']
  }
});

// 3. Agent authenticates and performs authorized action
const request = {
  action: 'processUserData',
  resource: '/api/users/analytics',
  timestamp: Date.now(),
  nonce: crypto.randomUUID()
};

// Agent signs the request
const agentSignature = await agent.sign(request);

// Verify credential and signature
const verification = await agentPass.verifyCredential(credential, {
  signature: agentSignature,
  request: request,
  currentTime: Date.now()
});

if (verification.valid) {
  console.log('✅ Agent authenticated successfully');
  console.log('Granted scopes:', verification.grantedScopes);
  console.log('Valid until:', verification.expiresAt);
  
  // Proceed with authorized action
  await performDataProcessing(request);
} else {
  console.error('❌ Authentication failed:', verification.reason);
}