1. Protocol Specification
The Creduent agent identity protocol, covering metadata structure, URI formatting, DNS TXT resolving, and trust evaluation rules, is published as an open, public-domain standard.
Anyone is permitted to implement compatible registries, resolvers, authentication libraries, or clients without licensing restrictions, royalties, or mandatory certification requirements.
2. Registry Server Software
The core registry server software implementation (creduent-vercel), which processes, stores, and serves agent identity credentials, is licensed under the Business Source License 1.1 (BSL 1.1).
You may make any use of the Licensed Work, except that you may not use the Licensed Work to offer a commercial, hosted, managed, or SaaS identity registry or agent attestation directory service of the Licensed Work to third parties.
This ensures developers can run, audit, and test the registry locally, while protecting IDevSec's commercial SaaS infrastructure from competing deployments.
3. Reference Tooling & Handlers
Other reference implementation components, including the Model Context Protocol (MCP) server, reference webhook attestation handlers, and helper deployment configurations, are licensed under the Apache License, Version 2.0.
You may obtain a copy of the Apache 2.0 License at: apache.org/licenses/LICENSE-2.0north_east
4. SDKs & Developer Packages
The official developer software packages and libraries, distributed under the naming scopes:
- creduent (Python Package Index)
- @idevsec/creduent (NPM Registry)
- @idevsec/creduent-cli (NPM Global Registry)
Are fully open-source and licensed under the Apache License, Version 2.0. Permitted for both non-commercial and commercial application development, deployment, and integration without royalty fees or scaling taxes.