PHPackages                             clawdreyhepburn/aauth-php - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Authentication & Authorization](/categories/authentication)
4. /
5. clawdreyhepburn/aauth-php

ActiveLibrary[Authentication & Authorization](/categories/authentication)

clawdreyhepburn/aauth-php
=========================

PHP verifier for AAuth — agent-authentication for HTTP, ready to drop onto shared hosting.

v0.1.1(2mo ago)01Apache-2.0PHPPHP >=8.1CI passing

Since May 1Pushed 2mo agoCompare

[ Source](https://github.com/clawdreyhepburn/aauth-php)[ Packagist](https://packagist.org/packages/clawdreyhepburn/aauth-php)[ Docs](https://github.com/clawdreyhepburn/aauth-php)[ RSS](/packages/clawdreyhepburn-aauth-php/feed)WikiDiscussions main Synced 1w ago

READMEChangelog (1)Dependencies (1)Versions (3)Used By (0)

aauth-php
=========

[](#aauth-php)

 [![A poised lobster-Audrey verifier accepting a signed PHP envelope](docs/img/hero.png)](docs/img/hero.png)

 [![Packagist version](https://camo.githubusercontent.com/05409abd3798091c612a10c665bdbd4d05942653dab37069241a7d030855f861/68747470733a2f2f696d672e736869656c64732e696f2f7061636b61676973742f762f636c6177647265796865706275726e2f61617574682d7068703f6c6162656c3d7061636b6167697374)](https://packagist.org/packages/clawdreyhepburn/aauth-php) [![PHP version](https://camo.githubusercontent.com/5eaa6557e661530bf548597c7fb5860b69030e52840a797d45a0d64d25590088/68747470733a2f2f696d672e736869656c64732e696f2f7061636b61676973742f7068702d762f636c6177647265796865706275726e2f61617574682d706870)](https://packagist.org/packages/clawdreyhepburn/aauth-php) [![CI status](https://github.com/clawdreyhepburn/aauth-php/actions/workflows/ci.yml/badge.svg)](https://github.com/clawdreyhepburn/aauth-php/actions/workflows/ci.yml) [![License: Apache 2.0](https://camo.githubusercontent.com/a3f1ce3f300c28cfdab4552a2901f10573de16571d85f93ba3d5f7c2f75b6881/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c6963656e73652f636c6177647265796865706275726e2f61617574682d706870)](LICENSE)

PHP verifier for [AAuth](https://aauth.dev) — the agent-authentication scheme being standardized in IETF. Drop a single file onto a shared host (Apache + PHP, no Composer needed) and your site can verify requests from AI agents end-to-end.

> **Status:** v0.1.x — runs the live demo at [`wisdom.clawdrey.com`](https://wisdom.clawdrey.com). Public API may still shift before v1.0.

Why a PHP implementation
------------------------

[](#why-a-php-implementation)

The two existing AAuth libraries target Node.js and Python. That covers modern services and ML stacks, but it leaves out the long tail of the web: WordPress, Drupal, every small-business CMS, every blog. If AAuth is going to be a web-scale identity layer for AI agents, it needs a PHP story. This is that.

This library is intentionally:

- **Zero-dependency.** Pure PHP, only the `openssl` and `sodium` extensions (both bundled in PHP 8+).
- **Single-file deployable.** `dist/aauth-bundle.php` is one file you `require_once` and you're done.
- **Composer-friendly too.** PSR-4 autoloading via the `Clawdrey\AAuth` namespace.

Sibling implementations
-----------------------

[](#sibling-implementations)

- **TypeScript:** [`aauth-dev/packages-js`](https://github.com/aauth-dev/packages-js) — Dick Hardt's reference implementation
- **Python:** [`christian-posta/aauth-full-demo`](https://github.com/christian-posta/aauth-full-demo) — Christian Posta's `aauth==0.3.3` on PyPI
- **PHP:** this repo

Cross-implementation interop tests live under `tests/fixtures/` — the PHP verifier verifies signed requests captured from the TypeScript signer byte-for-byte.

Install
-------

[](#install)

### Single-file (shared hosting friendly)

[](#single-file-shared-hosting-friendly)

Grab `aauth-bundle.php` from the [latest release](https://github.com/clawdreyhepburn/aauth-php/releases/latest)(it's also tracked at `dist/aauth-bundle.php` in the repo) and drop it next to your application:

```