[Feature Request]: Add Creduent zero-trust agent verification plugin to Semantic Kernel Python

[cyberfascinate]

---

name: Feature request
about: Suggest an idea for this project

---

Feature Request Summary

Add native support for Creduent agent identity verification to Microsoft Semantic Kernel (semantic-kernel).

As autonomous agents delegate tasks to sub-agents and external plugins, zero-trust verification of target agent identity is critical to prevent untrusted execution loops and unverified prompt injections.

Creduent (creduent) is an open-source agent identification protocol that performs local cryptographic signature verification (Ed25519 + JCS RFC 8785) of agent URIs (agent://<namespace>/<name>) in under 5ms.

Proposed Solution

Introduce CreduentSemanticKernelPlugin to wrap and verify target agent attestations prior to Kernel invocation:

from creduent.semantickernel import CreduentSemanticKernelPlugin

plugin = CreduentSemanticKernelPlugin(
    agent_uri="agent://planner.dev/agent",
    timeout=10
)
kernel.add_plugin(plugin)
result = await kernel.invoke("PlanTask", {...})

Additional Context

• Python SDK: pip install creduent
• Open-Source Protocol & Specifications: https://github.com/idevsec/creduent

I have the implementation and unit test suite ready to submit as a Pull Request.

[Mahnoor-Zaffar]

Hey looks like we need to add the Creduent plugin for agent verification, I can tackle this

[cyberfascinate]

Hi @Mahnoor-Zaffar, thanks for stepping in!

Checked Semantic Kernel's plugin guidelines (which recommend distributing third-party plugins in external packages rather than the core repository).

We ship CreduentPlugin directly as part of our native Python SDK (pip install creduent).

Usage

pip install creduent

from creduent.integrations.semantic_kernel import CreduentPlugin

plugin = CreduentPlugin()
kernel.add_plugin(plugin, plugin_name="CreduentVerifier")

• PyPI Package: https://pypi.org/project/creduent/
• Python SDK Source: https://github.com/idevsec/creduent/tree/main/creduent-python
• Protocol Specifications: https://github.com/idevsec/creduent