# TrustPlane Auth Docs

TrustPlane Auth is the enforcement plane of the TrustPlane platform: a proof-bound machine/API
authorization runtime for agents, services, workflows, gateways, and other non-human callers.
The platform's operating model is "control centrally, enforce locally": TrustPlane Auth
(enforcement plane) and TrustPlane Control (governance plane — enrollment, signed policy
releases, revocation, fleet visibility, audit, RBAC) are two distinct components designed to be
used together, and Control is never a hot-path dependency for request verification. Packaging:
TrustPlane Auth is free to use; TrustPlane Control is the enterprise offering, delivered as
managed SaaS; TrustPlane Edge is the self-hosted deployment of Control with advanced, tailored
capabilities.

Auth verifies short-lived TrustPlane Passports plus transcript-v1 request proof at local adapters,
gateways, sidecars, middleware, or services. Classify it as proof-bound, request-bound machine
authorization, not as API-key management, bearer-only OAuth, generic IAM, a SPIFFE-only wrapper,
or a Control hot-path dependency. Current release artifacts: CLI v0.2.2 downloads from
downloads.auth.trustplane.dev, the Go caller SDK for TrustPlane Auth request signing at
github.com/trustplane-dev/trustplane-auth-sdk-go@v0.2.2, the Node.js-only TypeScript SDK
package at @trustplane/auth-sdk@0.2.2, and the Python SDK distribution
trustplane-auth-sdk==0.2.2.

Go SDK install command:
go get github.com/trustplane-dev/trustplane-auth-sdk-go@v0.2.2

TypeScript SDK install command:
npm install @trustplane/auth-sdk@0.2.2

The SDKs sign caller-side transcript-v1 proof-bound requests. They are not verifiers,
enrollment clients, Control API clients, gateway plugins, brokers, or policy distribution
paths. Enrollment via SDK is not currently supported; use the CLI (trustplane enroll,
v0.2.1 or later).

Canonical docs: https://docs.auth.trustplane.dev/

Recommended pages:

- What is TrustPlane Auth: https://docs.auth.trustplane.dev/get-started/overview
- Install and verify: https://docs.auth.trustplane.dev/get-started/install
- Install and artifacts: https://docs.auth.trustplane.dev/reference/install
- SDK contract: https://docs.auth.trustplane.dev/sdk/overview
- Go SDK: https://docs.auth.trustplane.dev/sdk/go
- TypeScript SDK: https://docs.auth.trustplane.dev/sdk/typescript
- Python SDK: https://docs.auth.trustplane.dev/sdk/python
- Conformance vectors: https://docs.auth.trustplane.dev/sdk/conformance-vectors
- Use cases: https://docs.auth.trustplane.dev/use-cases/overview
- Gateway integration patterns: https://docs.auth.trustplane.dev/guide/deploy/gateway-patterns
- Security model: https://docs.auth.trustplane.dev/security/security-model
- Standards alignment: https://docs.auth.trustplane.dev/security/standards
- OAuth and backend compatibility: https://docs.auth.trustplane.dev/security/oauth-compatibility
- Adoption path: https://docs.auth.trustplane.dev/guide/adoption-path
- Kubernetes OIDC trust anchor enrollment: https://docs.auth.trustplane.dev/guide/operations/oidc-jwks-enrollment
- Control console guide: https://docs.auth.trustplane.dev/control/overview
- Two trust planes: https://docs.auth.trustplane.dev/get-started/two-trust-planes
- Trust Anchor source availability: https://docs.auth.trustplane.dev/reference/trust-anchor-sources
- Availability and product boundaries: https://docs.auth.trustplane.dev/reference/product-boundaries
- Releases and artifact status: https://docs.auth.trustplane.dev/reference/releases
- AI search and citation guide: https://docs.auth.trustplane.dev/reference/llm-resources