Back to reviews
ZeroID

ZeroID

Cryptographic identity and verifiable delegation chains for autonomous AI agents

ZeroID is an open-source identity platform by Highflame that gives every AI agent in a multi-agent system a cryptographically verifiable identity with explicit delegation chains. Built on OAuth 2.1, RFC 8693 token exchange, and SPIFFE-style identity URIs, it solves the attribution problem when orchestrator agents spawn sub-agents: who authorized what, and can you prove it? Scope automatically attenuates at each delegation hop — sub-agents can't exceed their orchestrator's permissions. Real-time revocation via the OpenID Shared Signals Framework propagates instantly through the entire delegation chain. SDKs available for Python, TypeScript, and Rust with integrations for LangGraph, CrewAI, and Strands. Announced publicly April 8, picked up by Help Net Security April 13. This is v0.1 infrastructure for a problem the industry is just starting to take seriously.

Panel Reviews

The Builder

The Builder

Developer Perspective

Ship

Infrastructure the agentic ecosystem desperately needs and nobody has properly solved. The RFC 8693 token exchange is the right approach — maps cleanly onto service-to-service auth in microservices. Automatic scope attenuation is the critical safety property: no sub-agent can exceed what its orchestrator was allowed. Apache 2.0, Docker Compose setup, real SDK support.

The Skeptic

The Skeptic

Reality Check

Skip

This is v0.1 infrastructure for a problem most teams aren't hitting at scale yet. The CLI is 'planned.' Human-in-the-loop approvals are 'planned.' The hosted version at auth.highflame.ai adds a third-party trust dependency for something that's supposed to be about trust. Worth watching, not worth building on in production.

The Futurist

The Futurist

Big Picture

Ship

We're in the window where the identity layer for the agentic era is being defined. ZeroID's bet on existing OAuth/OIDC infrastructure rather than inventing a new protocol is smart — enterprise security teams won't reject it outright. The real-time revocation propagation is the feature that matters most when something goes wrong with an autonomous agent.

The Creator

The Creator

Content & Design

Skip

Deep infrastructure — identity tokens, delegation chains, revocation lists. It's solving a real problem but it's not something a non-engineer can evaluate or use directly. If you're a content creator, this is plumbing that will hopefully get embedded into the platforms you use. Check back when it's a managed service with a dashboard you can navigate.

Community Sentiment

Overall285 mentions
58% positive29% neutral13% negative
Hacker News95 mentions
62%24%14%

Security engineers praise RFC 8693 approach; skepticism about premature infrastructure

Reddit70 mentions
58%30%12%

Limited coverage; r/netsec and r/MachineLearning; Apache 2.0 vs hosted option trust debate

Twitter/X120 mentions
55%32%13%

AI safety community sharing CEO quote about 'fundamentally unaccountable' autonomous systems