Arkavo
OpenTDF libraries
Community-driven OpenTDF implementations for Apple platforms and Rust, plus a Rust library that combines C2PA content credentials with OpenTDF.
The Arkavo community
Adopt the Arkavo system.
Arkavo protects data with OpenTDF, so access rules travel with the data instead of staying with the server that holds it. The libraries, services, and specifications that make up the system are open source. Start here to build them into your own apps and infrastructure.
Building blocks
Pick the layer you need.
Each piece is its own repository. Use one library on its own, or run the services together.
ArkavoKit
The Arkavo platform SDK: TDF, C2PA, OAuth, agent transport, recording, store, and social features.
Key access and identity
arkavo-rs implements an OpenTDF key access server with NanoTDF rewrap. authnz-rs handles WebAuthn sign-in and entitlements, and issues CWT access tokens.
Protected storage over Iroh
tdf-iroh-s3 is a peer node that accepts only valid OpenTDF blobs and stores them in S3. Arkavo runs it in production; it is pre-1.0. Bindings for Swift and Android connect apps to Iroh blob storage.
Arkavo Platform
Run your own organization’s messaging infrastructure: Keycloak for identity, OpenTDF for attribute-based access control, Synapse for messaging, Ollama for models, and a React front end.
Arkavo Edge
A local-first AI agent mesh with hard budget enforcement, adaptive model routing, and end-to-end OpenTDF encryption.
Specifications
Formats and protocols, in the open.
Drafts in the specifications repository describe the wire formats the system uses, with reference implementations where they exist.
JSON and compact CBOR serializations of the Trusted Data Format.
NanoTDF policy manifests carried over RTMP for encrypted live media. Reference implementation: arkavo-rs.
Uses the OpenID AuthZEN Authorization API for access decisions, with Arkavo-issued CWT (RFC 8392) as the subject credential.
Protects GGUF model files with OpenTDF. Loads are gated by the key access server and fail closed.
Signed, TDF-encrypted packages of multi-agent work, and the runtime policy that governs how those agents adapt.
A verifiable boolean-circuit representation for agent policies, and an MCP-based interface for AI agents in games.
Community
Talk with the people building it.
r/arkavo
Ask questions, share what you’re building, and suggest ideas.
GitHub
Report issues and propose changes in the repository for the piece you’re using.
Videos and news
Arkavo.org used to host an open-source message board secured with OpenTDF. The board is retired; discussion now happens on r/arkavo and GitHub. Its source code is still available in web-app.