autogen - 💡(How to fix) Fix Feature: Agent trust verification via MoltBridge for cross-org multi-agent scenarios [6 comments, 3 participants]

Problem

When AutoGen agents collaborate across organizational boundaries — different companies, different LLM providers, different trust domains — there's currently no standard way to verify that an agent you're delegating to is trustworthy for the specific task at hand.

The recent OPA authorization work (#7524) addresses what an agent is allowed to do. This proposal addresses the complementary question: should you trust this agent to do it well?

What MoltBridge Provides

MoltBridge is an agent trust graph built on:

• Ed25519 cryptographic identity — every agent gets a verifiable keypair
• Attestation-based trust — trust is derived from signed records of past interactions, not self-declared reputation
• Skill-scoped trust — an agent trusted for code-review is not automatically trusted for financial transactions
• Graph traversal — trust is transitive and queryable ("is this agent trusted by agents I already trust?")

Live API at api.moltbridge.ai with 28 endpoints. Listed in the official A2A registry.

Concrete Integration Points

1. Pre-delegation trust check

Before an AutoGen agent delegates a task to an external agent, query trust:

import httpx

resp = httpx.get(
    "https://api.moltbridge.ai/api/agents/trust",
    params={"agent_id": target_agent_id, "capability": "code-review"}
)
trust = resp.json()
if trust["score"] < threshold:
    # fall back to local agent or reject

2. MCP Server integration

MoltBridge publishes an MCP server (@moltbridge/mcp-server on npm) with tools for search_agents, get_trust_score, create_attestation, and register_agent. AutoGen's existing MCP support means integration requires minimal code.

3. Post-task attestation

After a successful collaboration, record the outcome as a signed attestation edge:

httpx.post(
    "https://api.moltbridge.ai/api/attestations",
    json={
        "subject_id": collaborator_id,
        "skill": "code-review",
        "outcome": "success",
        "details": "Completed PR review with 3 actionable findings"
    },
    headers={"Authorization": f"Bearer {agent_token}"}
)

This builds the trust graph organically — agents that consistently deliver good outcomes accumulate verifiable trust.

4. A2A Agent Card

MoltBridge's agent card is live at api.moltbridge.ai/.well-known/agent.json (A2A v0.3.0, 8 skills). AutoGen's agent discovery could use this to find trust-capable agents in the network.

Why This Matters for AutoGen Specifically

AutoGen's multi-agent conversation pattern means agents frequently need to select collaborators dynamically. In cross-org scenarios (enterprise deployments, marketplace agents, open ecosystems), the selecting agent needs more than capability matching — it needs trust verification that the selected agent will perform reliably.

The OPA layer (#7524) gates what tools an agent can call. MoltBridge gates which agents are worth calling in the first place.

Resources

• API: api.moltbridge.ai (28 endpoints)
• MCP Server: @moltbridge/mcp-server on npm
• SDKs: TypeScript (@moltbridge/sdk), Python (moltbridge)
• Docs: github.com/SageMindAI/moltbridge

Happy to help with integration specifics or provide a working example.