Hanzo Zero Trust

Hanzo ZT is a zero-trust overlay networking SDK suite with ZAP transport. It provides mTLS encryption, NAT traversal, Hanzo IAM authentication, and billing enforcement across 6 programming languages.

Key Features

• Zero Trust Overlay: x509 mTLS network with NAT traversal, no open ports required
• ZAP Transport: Cap'n Proto RPC over ZT fabric with zero-copy binary framing
• Hanzo IAM Auth: JWT authentication via hanzo.id with external JWT support
• Billing Enforcement: Balance check before dial, usage recording after session
• 6 Language SDKs: Rust, Go, TypeScript, Python, C++, and C with consistent APIs
• MCP Integration: ZAP transport trait impl with zt:// URL scheme

Quick Example

use hanzo_zt::{ZtClient, ZtConfig};

#[tokio::main]
async fn main() -> Result<()> {
    let client = ZtClient::connect(ZtConfig {
        network_id: "your-network-id",
        auth: Auth::hanzo_jwt("your-jwt-token"),
    }).await?;

    // ZAP transport is automatic
    let tools = client.zap().list_tools().await?;
    for tool in tools {
        println!("Tool: {} - {}", tool.name, tool.description);
    }

    Ok(())
}

Architecture

App --> ZAP Client --> ZT Transport --> ZT Fabric --> ZT Service
            |                              |
      Cap'n Proto RPC               x509 mTLS overlay
      (zero-copy binary)            (NAT traversal built-in)

Getting Help

• GitHub Issues - Bug reports and feature requests
• Discord - Community discussions