SAM
A private, identity-verified peer-to-peer network for AI agents, where each node publishes tools and models to the mesh and can discover and call what other nodes expose, with nothing reachable unless explicitly granted.
SAM runs a node alongside an agent, giving it a way to publish tools and models to a network, a way to find and call what other nodes publish, and an identity every other node can verify. Nodes connect directly when they can and through relays when they cannot, so the network works across laptops, containers, clusters and phones behind NAT.
Two properties hold everywhere: nothing is reachable by default, since a node exposes no services until its configuration says so and no node may call a service the mesh policy has not granted, with grants evaluated on service names rather than addresses; and identity comes from a configured identity provider, since a node enrolls with an OpenID Connect token or a one-time bootstrap token and the control plane turns that into a short-lived, offline-verifiable credential bound to the node's own key.
The mesh exposes an OpenAI-compatible endpoint that routes model requests to whichever node serves the requested model, and also acts as a local MCP server for an agent. A control plane, router and web console can run in one binary for a laptop or small deployment, or a user can join a shared developer testnet.