ScopeTrail
github.com/scopetrail/scopetrail- Category
- Developer Tools
- Rank
- No. 4136Tools index
Previous survey · No. 3902 ·
- Pricing
- Open Source
- Type
- TOOL
- Use case
- Security & Identity
- GitHub
- 1 stars
- Date
About
ScopeTrail is a TypeScript library that audits multi-hop AI agent delegation by validating the chain of OAuth Token Exchange "act" claims each hop leaves behind, then signing a tamper-evident receipt (Ed25519 over JCS) and storing it in an AT Protocol PDS. This lets a user later verify whether an action performed several hops away from them stayed within the scope they originally authorized, without the issuer needing to be called back and without raw tokens ever being stored (only their SHA-256 digests).
At a glance
ScopeTrail’s delegation-receipts library signs a record of who authorized an agent, what they delegated and which action followed. It is worth evaluating when another service needs to verify the record without receiving the signing key.
Good fit
Developers designing an audit trail across services that act on someone’s behalf.
Consider something else when
Use a separate authorization control if you need to prevent an action before it runs.
Start here
Sign a receipt for a fictional action. Verify it, then change one field and confirm verification fails. Try a second submission to check replay handling.
Cost and requirements
Node.js library using built-in cryptography. The project documents Ed25519 signatures and a public key publication path.
Limits to know
The default replay store is in-process. The docs recommend shared state across replicas. A valid signature identifies what the signer attested and leaves the accuracy of that account to the surrounding system.
Sources checked 2026-11-05. Source-based assessment.
Why it made the leaderboard
ScopeTrail mints signed, offline-verifiable receipts documenting whether a multi-hop agent delegation stayed within what a user actually authorized, filling a real audit gap in agent-to-agent OAuth token exchange.
Tags
Tech Stack
Comments (0)
No comments yet
Editorially curated, with community endorsements as a secondary signal. Corrections welcome.