Tenuo provides warrant-based authorization specifically designed for AI agents, addressing the challenge of ensuring that agents act strictly within their intended mandate. The platform issues task-scoped warrants that define the specific tools, arguments, and bounded lifetimes available to each agent, with these warrants being cryptographically bound to the holder's key, rendering them ineffective if stolen.
A central feature of Tenuo is its approach to delegation: as authority is delegated from one agent to another, the scope of each derived warrant can only narrow relative to its parent. This ensures that no child warrant can exceed the permissions of its predecessor, and every delegation hop is cryptographically chained to the one before it. The entire delegation chain is signed at each step, and the full chain can be verified offline in under 50 microseconds. This enables detailed auditing of who authorized what, at which point in the chain, and under what constraints. The platform supports granular capabilities such as limiting database queries, file reads, and other actions by scope and time-to-live, with explicit examples showing how warrants can restrict access down to specific resources or time windows, and how expired or unauthorized actions are cryptographically denied.
Tenuo is intended for integration into AI agent workflows and can serve as a drop-in component for technology stacks involving tools like CrewAI, LangChain, LangGraph, Temporal, OpenAI SDK, Google ADK, AutoGen, MCP, A2A, and Kubernetes. Its architecture features a Rust core and is open source, with Python bindings available for integration into various pipelines. The platform is also referenced as the canonical implementation of the IETF OAuth Working Group's draft for Attenuating Authorization Tokens for agentic delegation chains, positioning it within the standards community for secure agent authorization.
The service is available through Tenuo Cloud, which handles warrant issuance and cross-cluster audit capabilities, and is suitable for scenarios requiring end-to-end warrant gating, multi-hop delegation, and prompt injection resistance. Tenuo's open-source status and technical focus make it adaptable for deployment in diverse environments where fine-grained, auditable, and cryptographically enforced agent authorization is required.
Tenuo is a Security & compliance platforms product. Ensures secure, granular authorization for AI agents through cryptographically enforced warrants. Tenuo is a B2B product aimed at AI security engineers and developers. Tenuo is available on the web, the command line, and API.
Tenuo first shipped in 2025. The project is developed in the open on GitHub with 73 stars and 223 commits in the last 90 days. Among its 5 catalogued features are task-scoped warrants, cryptographic enforcement, and offline verification.
Latest indexed changes and source events
Other apps tracked under the same category.
