Python: SDK overview

The dnsid package is the Python SDK for the DNSid Protocol — agent identity management and verification. Install with pip install dnsid (Python 3.11+). The package ships a py.typed marker, so type checkers see the SDK’s full mypy-strict annotations.

See the quickstart and the SDK overview for guided introductions; these pages are the generated API reference.

Import surface

Everything documented here is importable from the package root (from dnsid import IdentityManager, JoseProfile), mirroring the TypeScript SDK’s umbrella package. The application-profile classes are also importable from their home submodules — both paths are supported and refer to the same classes:

from dnsid.jose import JoseProfile
from dnsid.http_signatures import HttpSignatureProfile

The transparency-log integration is the exception: import it from dnsid.c2sp_tlog.

Synchronous by design

Verification and most public operations are synchronous. Async support includes RegistryClient.async_wait_for_status() (which polls synchronously), signed httpx.AsyncClient transport plumbing, and async_retry_transient. Call blocking SDK operations from async code via asyncio.to_thread or an executor.

Application profiles

The JOSE, HTTP Message Signatures, Web Bot Auth, and OIDC profiles are not part of the core DNSid protocol — they are optional application-layer integrations built on top of it.

SDKConformance

from dnsid import SDKConformance

Immutable protocol-facing conformance metadata for this SDK release.

SDK_CONFORMANCE

from dnsid import SDK_CONFORMANCE

Value: SDKConformance(publish_profile=_DRAFT_01, verification_profiles=MappingProxyType({_DRAFT_01: _DRAFT_01, 'DNSid1': _DRAFT_01}), specification_status='internet-draft', log_bindings=MappingProxyType({'c2sp-tlog': _C2SP_TLOG_BINDING}), known_deviations=())