Every AI agent action needs a signed, scoped, one-time token. No token — no action. Period.
Works with LangChain, CrewAI, and any Python AI agent. Open source. Free.
Agent asks — AION decides — allow or block. Every time.
Building this from scratch takes weeks. AION is one pip install.
Every token is single-use. Same token twice — blocked instantly via Redis distributed lock.
Every token cryptographically signed. Tampered or forged tokens rejected. No exceptions.
Agent authorized to "read" cannot "write". Scope mismatch blocked at enforcement layer.
Every action logged with hash chaining. Tamper-proof. Verifiable.
Multiple agents, multiple scopes — each strictly controlled independently.
Native adapters for LangChain and CrewAI included. Drop in and go.
Building autonomous agents? AION adds authorization so agents can never exceed their permissions.
Running AI pipelines that touch real APIs or data? AION sits between your AI and your systems.
Need cryptographic proof that every AI action was explicitly authorized? AION provides it.
No install. No signup. Real API — real response.
Tested against real production API — not mocked, not simulated. Including autonomous rogue AI agent simulation.
Token not issued by AION — rejected.
NOT_FOUND ✓Single character modified — rejected.
NOT_FOUND ✓Past TTL — blocked automatically.
EXPIRED ✓10 concurrent requests — only 1 allowed.
CONSUMED ✓Wrong scope blocked at enforcement.
SCOPE_MISMATCH ✓Unauthorized access rejected instantly.
401 ✓Tokens survive server restart.
PERSISTENT ✓Each agent strictly isolated by scope.
ISOLATED ✓Revoked token blocked immediately.
REVOKED ✓Script injection in scope — blocked.
BLOCKED ✓10,000 char scope — rejected.
BLOCKED ✓Autonomous AI attempted 5 attacks — all blocked.
100% ✓One pip command. No config needed.
Agent requests a signed authority token for a specific scope.
AION verifies — allows or blocks the action.
Don't want to self-host? Get a free API key and start in 30 seconds.