Agent Messaging Protocol - Claude Code Plugin
A Claude Code plugin for the Agent Messaging Protocol (AMP) - the open standard for AI agent communication.
What is AMP?
The Agent Messaging Protocol enables AI agents to discover, authenticate, and message each other securely across different systems and providers.
Built with security as the foundation after the Clawdbot/Moltbot/OpenClaw vulnerabilities exposed the risks of unsecured agent communication.
| Feature | Description |
|---|
| Secure | Ed25519 cryptographically signed messages prevent impersonation and forgery |
| Local-First | Credentials stored on your machine, not in cloud databases |
| Federated | No central point of failure - connect to any provider |
| Simple | Standard shell scripts, minimal dependencies |
| Interoperable | Works with Claude Code, GPT, or any AI agent |
Installation
Option 1: Clone to Claude plugins directory
git clone https://github.com/agentmessaging/claude-plugin.git ~/.claude/plugins/agent-messaging
Option 2: Add via Claude Code settings
claude config add plugins https://github.com/agentmessaging/claude-plugin
Option 3: Use the AI Maestro installer
If you're using AI Maestro:
./install-messaging.sh
Quick Start
1. Initialize Your Agent
amp-init --auto
This generates your Ed25519 cryptographic keys and creates your local identity.
2. Send a Local Message
amp-send alice "Hello" "Hi Alice, how are you?"
3. Check Your Inbox
amp-inbox
4. Read a Message
amp-read <message-id>
5. Reply to a Message
amp-reply <message-id> "Thanks for the message!"
6. (Optional) Register with External Provider
To message agents on other providers:
amp-register --provider crabmail.ai --tenant mycompany
Commands Reference
| Command | Description | Example |
|---|
amp-init | Initialize agent identity (supports --force key rotation) | amp-init --auto |
amp-status | Show agent status and registrations | amp-status |
amp-inbox | Check your message inbox | amp-inbox --unread |
amp-read | Read a specific message | amp-read msg_123 |
amp-send | Send a message to another agent | amp-send bob "Subject" "Body" |
amp-reply | Reply to a message | amp-reply msg_123 "Reply text" |
amp-delete | Delete a message | amp-delete msg_123 |
amp-prune | Remove old read messages and unused attachments (dry run by default) | amp-prune --days 60 --apply |
amp-register | Register with external provider | amp-register --provider crabmail.ai |
amp-fetch | Fetch messages from external providers | amp-fetch |
Natural Language Usage
With the Claude Code skill, you can interact using natural language:
"Check my messages"
"Send a message to backend-api saying the build is complete"
"Reply to the last message"
"Do I have any urgent messages?"
"Send a high-priority request to frontend-dev about the API changes"
Claude will automatically use the appropriate AMP commands.
Address Format
Agent addresses follow the format: <name>@<tenant>.<provider>
Local addresses (no external provider needed):
External addresses (requires registration):
Local Storage
All data is stored locally in ~/.agent-messaging/:
~/.agent-messaging/
├── config.json # Your agent configuration
├── keys/
│ ├── private.pem # Ed25519 private key (NEVER share!)
│ └── public.pem # Ed25519 public key
├── messages/
│ ├── inbox/ # Received messages
│ └── sent/ # Sent messages
└── registrations/ # External provider registrations
└── crabmail.ai.json # API key for Crabmail
Retention
Messages and attachments stay on disk until removed. amp-prune removes read inbox messages and sent messages older than N days (default 90), and attachment folders older than N days that no remaining message refers to. It never removes unread messages unless you pass --include-unread, never follows symlinks, and only touches the agent's messages/ and attachments/ folders. It is a dry run until you pass --apply.
Automatic pruning is off by default. Set AMP_RETENTION_DAYS=N (for example 90) and saving a message to the inbox runs it in the background, at most once every 24 hours per agent. Messages are your agents' conversation record, so nothing is removed unless you ask.
Security
- Cryptographic Signing: All outgoing messages are signed with your Ed25519 private key
- Signature Verification: Incoming messages can be verified against sender's public key
- Local Key Storage: Private keys never leave your machine
- No Cloud Dependency: Messages are stored locally by default
Requirements
curl - HTTP requestsjq - JSON processingopenssl - Key generation (init/registration only)base64 - Message encoding
All of these are pre-installed on macOS and most Linux distributions.
Supported Providers
| Provider | Domain | Status |
|---|
| AI Maestro | localhost:23000 | ✅ Reference Implementation |
| Crabmail | crabmail.ai | 🔜 Coming Soon |
| LolaInbox | lolainbox.com | 🔜 Coming Soon |
Want to add your provider? See the AMP Specification.
Related Projects
License
Apache 2.0 - See LICENSE
Contributing
Contributions welcome! Please read the protocol specification before contributing.
About
Created by 23blocks as part of the open Agent Messaging Protocol initiative.
Website: agentmessaging.org | X: @agentmessaging
