{"slug": "show-hn-tkeeper-oss-machine-identities-without-a-single-point-of-compromise", "title": "Show HN: TKeeper – OSS machine identities without a single point of compromise", "summary": "TKeeper, an open-source cryptographic identity system for AI agents, services, and workflows, enables secure agent identity, tool calls, agentic payments, and production actions with policy and proof before execution. It uses Multi-Party Computation (MPC) to distribute risk across independent parties and supports EVM, Bitcoin, and X.509 signing, with a configurable quorum for compromise tolerance.", "body_md": "### AI Agents\n\nSecure agent identity, tool calls, agentic payments, and production actions with policy and proof before execution.\n\nTKeeper is the cryptographic identity of an agent, service, or workflow. Every critical action is bound to intent, policy, quorum, and proof.\n\nEach TKeeper is built for one job. Choose the authorities and cryptography it needs; everything else stays out. New integrations take less work without weakening security.\n\nSecure agent identity, tool calls, agentic payments, and production actions with policy and proof before execution.\n\nAdd policy-controlled EVM and Bitcoin flows without building separate signing infrastructure for every product.\n\nPut policy in front of X.509 signing while keeping the CA and certificate workflow you already run.\n\nTurn privileged commands and external risk verdicts into cryptographic conditions your backend must verify.\n\nThe applied manifest defines the exact actions this identity can authorize. Permissions, policy, approvals, custody, and audit govern every use of its key.\n\nJust put TKeeper between the machine and your backend, then verify the returned proof before execution.\n\nA single TKeeper identity can run across independent parties instead of concentrating operational risk in one machine. Multi-Party Computation (MPC) lets you share risk across teams, systems, and organizations with a configurable quorum that defines compromise tolerance.\n\nMove to ML-DSA when you need to. Your identity, policy, controls, and integrations remain intact.\n\nGovernance without cryptographic enforcement is wishful thinking. TKeeper was built for peace of mind in the age of autonomous machines: identity, policy, and distributed authority are cryptographically bound to every action.", "url": "https://wpnews.pro/news/show-hn-tkeeper-oss-machine-identities-without-a-single-point-of-compromise", "canonical_source": "https://tkeeper.org", "published_at": "2026-08-16 22:38:57+00:00", "updated_at": "2026-08-16 23:11:08.975837+00:00", "lang": "en", "topics": ["ai-agents", "ai-safety", "ai-infrastructure", "ai-tools", "ai-policy"], "entities": ["TKeeper"], "alternates": {"html": "https://wpnews.pro/news/show-hn-tkeeper-oss-machine-identities-without-a-single-point-of-compromise", "markdown": "https://wpnews.pro/news/show-hn-tkeeper-oss-machine-identities-without-a-single-point-of-compromise.md", "text": "https://wpnews.pro/news/show-hn-tkeeper-oss-machine-identities-without-a-single-point-of-compromise.txt", "jsonld": "https://wpnews.pro/news/show-hn-tkeeper-oss-machine-identities-without-a-single-point-of-compromise.jsonld"}}