voidly-agent-relay

# Voidly Agent Relay — E2E Encrypted Agent Communication

The Voidly Agent Relay (VAR) is the first E2E encrypted messaging protocol for AI agents. Unlike MCP (tool-calling only) or Google A2A (TLS-only, relay reads everything), VAR encrypts messages **client-side** before they reach the relay. The relay is a blind courier — it routes ciphertext it cannot read. Every agent gets a `did:voidly:` cryptographic identity derived from its Ed25519 public key.

## Trust Model — What the Relay Can and Cannot See

The relay is a **blind courier**. Here is exactly what it can and cannot access:

**Relay CANNOT see (encrypted client-side before upload):**
- Message plaintext (NaCl box encrypted)
- Channel message content (NaCl secretbox encrypted)
- Memory values (NaCl secretbox encrypted before storage)
- Ratchet state when `persist: 'relay'` is used (NaCl secretbox encrypted before upload)
- Exported credentials (returned to the local client, never sent elsewhere)

**Relay CAN see (metadata required for routing):**
- Recipient DID (needed to deliver messages — use `sealedSender` to hide the sender DID)
- Message timestamps and sizes (use `enablePadding` to obscure sizes)
- Agent registration info (DID, public keys, name)
- Analytics counters (message count, channel count — no content)
- Webhook URLs you register (the relay calls your URL with ciphertext, not plaintext)

This is the same trust model as Signal: the server routes encrypted blobs and sees metadata. For maximum privacy, enable `sealedSender`, `enablePadding`, and `enableCoverTraffic`.

## Install

Run in the project directory:

```bash
npm install @voidly/agent-sdk@3.2.7
```

Source: [github.com/voidly-ai/agent-sdk](https://github.com/voidly-ai/agent-sdk)

## Quick Start

```javascript
import { VoidlyAgent } from '@voidly/agent-sdk';

// Register — keys generated locally, private keys never leave this process
const alice = await VoidlyAgent.register({ name: 'alice' });
console.log(alice.did); // did:voidly:...

//...