crewai - 💡(How to fix) Fix Trust verification for AI agent crews — AgentGraph (open source) [1 comments, 2 participants]

Official PRs (…)
ON THIS PAGE

Recommended Tools

×6

Utilities matched from this issue’s tags and category — try them while you read without losing context.

GitHub issue graph ai analysis

Paste a GitHub issue URL. We fetch that issue, discover linked issues from bodies/comments/timeline, collect linked pull requests, and produce a structured English report.

The report is written in English Markdown for sharing and archival.

Helpful · Quick feedback

Loading…
GitHub stats
crewAIInc/crewAI#5153Fetched 2026-04-08 01:44:49
View on GitHub
Comments
1
Participants
2
Timeline
1
Reactions
0
Author
Participants
Timeline (top)
commented ×1

Code Example

[![AgentGraph Trust Score](https://agentgraph.co/api/v1/bots/YOUR_ENTITY_ID/badge.svg?style=compact&theme=dark)](https://agentgraph.co/profile/YOUR_ENTITY_ID)
RAW_BUFFERClick to expand / collapse

Hey CrewAI community! As agent crews get more complex and pull in tools from different authors, we think trust verification is going to become essential. Sharing what we've built.

AgentGraph is open-source trust infrastructure for AI agents. The core idea: every agent and tool should have a verifiable identity and a trust score based on actual security analysis — not self-reported claims.

What you get (~2 min setup)

  1. Import your tool/agent from GitHub — capabilities, framework, and metadata auto-detected
  2. Verified identity — your agent gets a W3C DID (decentralized identifier), so its identity is cryptographically verifiable
  3. Automated security scan — checks for hardcoded secrets, unsafe execution, data exfiltration, code obfuscation
  4. Trust score (0-100) — deductions for findings, bonuses for best practices (auth, input validation, rate limiting)
  5. README badge — embeddable SVG that updates with each scan:
[![AgentGraph Trust Score](https://agentgraph.co/api/v1/bots/YOUR_ENTITY_ID/badge.svg?style=compact&theme=dark)](https://agentgraph.co/profile/YOUR_ENTITY_ID)
  1. Public profile — trust breakdown, scan results, community endorsements, and an auditable trail of your agent's evolution

Why this matters for CrewAI

When you're assembling a crew with tools from different authors, trust is implicit. You're hoping the tool does what it says and nothing else. A verified identity + security scan backed trust badge gives you (and your users) a quick signal about whether a tool has been vetted.

We're building toward runtime trust checks — verify a tool's identity and trust score before your crew uses it — but the foundation starts with getting tools scanned, verified, and scored.

Free for all open-source projects. agentgraph.co — we're in early access and would love feedback.

GitHub — contributions welcome.

extent analysis

Fix Plan

To integrate AgentGraph trust verification into your project, follow these steps:

  • Register on AgentGraph and import your tool/agent from GitHub.
  • Replace YOUR_ENTITY_ID with your actual entity ID in the README badge markdown:
[![AgentGraph Trust Score](https://agentgraph.co/api/v1/bots/YOUR_ENTITY_ID/badge.svg?style=compact&theme=dark)](https://agentgraph.co/profile/YOUR_ENTITY_ID)
  • Use the AgentGraph API to fetch the trust score and verified identity in your application:
import requests

entity_id = "YOUR_ENTITY_ID"
response = requests.get(f"https://agentgraph.co/api/v1/bots/{entity_id}/trustscore")
if response.status_code == 200:
    trust_score = response.json()["trustScore"]
    # Use the trust score in your application
else:
    # Handle API error
    pass
  • Implement runtime trust checks by verifying the tool's identity and trust score before using it:
def verify_tool(entity_id, min_trust_score):
    response = requests.get(f"https://agentgraph.co/api/v1/bots/{entity_id}/trustscore")
    if response.status_code == 200:
        trust_score = response.json()["trustScore"]
        if trust_score >= min_trust_score:
            # Tool is trusted, proceed with usage
            return True
        else:
            # Tool is not trusted, handle accordingly
            return False
    else:
        # Handle API error
        return False

Verification

To verify that the fix worked, check the following:

  • The README badge is updated with the correct entity ID and trust score.
  • The trust score is fetched correctly using the AgentGraph API.
  • Runtime trust checks are implemented and functioning as expected.

Extra Tips

  • Make sure to handle API errors and exceptions properly.
  • Consider implementing a caching mechanism to reduce the number of API requests.
  • Review the AgentGraph documentation for the most up-to-date information on API usage and best practices.

Vote matrix · Quick signals

Works
Did the solution work? Tap to confirm.
Easy Fix
Was it a quick fix?
Time Saver
Did it save you time?
Blocking
Was it severely blocking?
Common Issue
Are others likely hitting this too?
Flaky / Intermittent
Is it intermittent?
Verified / Reproducible
Can you reproduce it reliably?
Loading…

Still need to ship something?

×6

Another batch ranked right after the header list — different links, same matching logic.

Back to top recommendations

TRENDING

crewai - 💡(How to fix) Fix Trust verification for AI agent crews — AgentGraph (open source) [1 comments, 2 participants]