FastAPI Middleware

from fastapi import FastAPI
from mudraid_middleware import MudraIDMiddleware

app = FastAPI()
app.add_middleware(MudraIDMiddleware)

@app.get("/api/v1/items")
def list_items():
    return {"items": [...]}   # runs only after the token and scope checks pass

​

When to use it

​

What it does per request

1. Matches the method and path against the rules in mudraid_scopes.yaml.
2. Lets public routes through untouched.
3. Returns 404 for skip routes and routes with no rule — they’re invisible to agents.
4. Reads the Authorization: Bearer token.
5. Verifies the token’s signature, issuer, audience, and timing against MudraID’s published keys — locally, with no per-request callback. Keys are cached and refreshed automatically when MudraID rotates them.
6. Checks the route’s required scope is present in the token.
7. Forwards to your handler, or returns a structured {"error_code", "message"} error.

​

Install

pip install mudraid-middleware

​

Performance

​

Next

• Configuration — settings & defaults.
• Error responses — the stable error_code contract.
• Operator playbook — running it day to day.
• Quickstart — a guided first integration.