Cryptographic action receipts for Dify agent workflows. Sign every tool call with Ed25519, verify offline, maintain a tamper-evident audit trail.
No API key. No SaaS. Runs entirely local.
Signs an agent action with Ed25519. Returns a receipt with signature, ID, and timestamp. The receipt is appended to a hash-chained local audit log.
Verifies a receipt's Ed25519 signature. Works offline — no network needed.
Queries the local audit trail. Filter by time range or tool name. Shows recent signed actions with signer identity and timestamps.
- Install the plugin in Dify
- Optionally set a Key Name (default:
dify-agent) - That's it — no API keys, no accounts
The plugin auto-creates an Ed25519 identity on first use.
| Signet (this plugin) | SaaS signing services | |
|---|---|---|
| API key required | No | Yes |
| Data leaves your infrastructure | No | Yes |
| Offline verification | Yes | No |
| Signing key custody | You hold it | Provider holds it |
| Network dependency | None | Required |
- Signet — Cryptographic action receipts for AI agents
- PyPI: signet-auth
- Compliance Mapping — SOC 2, ISO 27001, EU AI Act