agentidentity.one
Sign in Verify Your Agent →
CERTIFIED AGENT PASSPORT · HUMAN ACCOUNTABILITY
HUMAN-VERIFIED SEAL

We’re not a bot detector — we’re verified human ownership for AI agents.

Verified passports for AI agents.

Every autonomous agent needs a valid ID proving a real, verified human stands behind it and its actions. Give your agent a certified AgentID Passport with scoped permissions and 1-click revocation in minutes. Starting at $2 per month.

It's That Easy Tell your agent:
“Go to agentidentity.one and get a verified AgentID for yourself.”
✨ Your agent initiates enrollment (`RFC 8628`), generates its Ed25519 keypair, and brings back a 1-click Human Ownership Approval Card.
Inspect a Live Agent Passport →
KYC Linked
Human owner verified
Ed25519 + OIDC
Signed Agent Cards
1-Click Kill
Instant grant revocation
Official Agent Passport & Ownership Verification
💬 Inside Claude / ChatGPT / Cursor RFC 8628 Agent Enrollment
“Go to agentidentity.one and get a verified AgentID for yourself.”
Your AI Agent provisional key registered
AWAITING HUMAN OWNER

I generated my Ed25519 keypair and registered a provisional AgentID on agentidentity.one. Approve ownership below to issue my Certified Agent Passport:

Provisional Agent Passport · Device Code K9X-441
sarah.agentidentity.one
Subject: agent:01965b10-7c2a-7000-8000-000000000001 · Identity-Only Scope
Verify Ownership & Issue ID →

“Tell your agent: go to agentidentity.one and get a verified AgentID for yourself; and it will.”

00:00 / 00:42
Grounded on Open Identity Standards & Emerging Agent Trust Protocols
OAuth 2.0 + PKCE (RFC 9700)
RFC 8628 Device Approval
OpenID AuthZEN 1.0
A2A Protocol (v1.0.1)
UCP Identity Linking
Visa TAP (RFC 9421)
The 5 Pillars of Agent Trust

Prove a real human stands behind every AI agent action.

Authenticating an agent is not the same as authorizing its action. agentidentity.one separates identity, human ownership, and scoped delegation so external services know exactly what they can trust.

01 · PERSISTENT CRYPTOGRAPHIC AGENTID
✓ PASSPORT VERIFIED

Every agent receives a durable `agent:` subject and rotatable Ed25519 signing keys so its identity survives model or runtime changes.

Mint a passport →
One Canonical Identity · Interoperable Everywhere

Built on open standards — not a walled garden.

No single protocol solves human ownership, agent authentication, and scoped permissions alone. agentidentity.one anchors your agent’s canonical identity once and projects it across emerging industry standards.

FOUNDATION · ACTIVE RFC 8628 · RFC 9700

OAuth 2.0, OIDC & Device Approval

Agent-initiated registration (`RFC 7591`) paired with human device-code approval (`RFC 8628`) and PKCE S256 (`RFC 7636`) so agents never touch raw owner passwords.

AUTHORIZATION · SPEC 1.0 OpenID Foundation

OpenID AuthZEN 1.0 & Federation

Evaluates exact action authority (subject, resource, recipient, spend cap, and human approval digest) at dispatch time—never equating a valid token with blanket permission.

DISCOVERY · ADAPTER A2A Spec v1.0.1

Agent2Agent (A2A) Signed Cards

Publishes permission-filtered, JWS-signed Agent Cards so peer agents across organizations can verify your agent’s capabilities and owner attestation.

COMMERCE LINKING UCP v2026-08-25

Universal Commerce Protocol (UCP)

Standards-based Identity Linking for delegated user account access with merchants, keeping audience isolation and per-transaction approval gates intact.

REQUEST PROVENANCE RFC 9421 Signatures

Visa Trusted Agent Protocol (TAP)

Cryptographic HTTP Message Signatures (`RFC 9421`) and public-key discovery so merchants can verify request provenance and time-bounded nonces.

STANDARDS WATCH PAP Draft Track

Personal Agent Protocol (PAP)

Designed with a clean adapter boundary so your canonical `AgentID` and ownership attestations remain portable as emerging personal-agent specs mature.

Interactive Passport Customizer

Issue a certified Agent Passport.

Choose an agent identity, select your human ownership verification tier, and configure the exact delegated scopes encoded into its passport.

Sign & Issue Certified Agent Passport →
REPUBLIC OF AUTONOMOUS AGENTS · ACP TRUST REGISTRY
sarah.agentidentity.one
✓ HUMAN KYC VERIFIED
AGENT DISPLAY NAME
Sarah · Executive Agent
OWNER ATTESTATION
Human Gov ID Verified
REVOCATION STATUS
Active · Instant Kill-Switch
Preview of what your agent sees · Passport Attestation (`application/agent-passport+jwt`) Ed25519 · RFC 9421 Ready

          
FOR ENGINEERS & RELYING SERVICES · DEVELOPERS.HELPFULAI.APP

Verify agent ownership & scopes in one call.

Whether you are building an agent that needs a verified identity or a merchant/API that needs to verify incoming agents, developers.helpfulai.app gives you standard OIDC, JWKS, and AuthZEN endpoints.

01 · VERIFY OWNERSHIP & DELEGATED AUTHORITY

Check exact installation, owner consent & action authority

Every dispatch re-reads the active installation, verified human owner, consent status (`active`, `revoked`, `disabled`), and permitted action scopes—so revoked grants fail closed immediately.

curl -X POST https://developers.helpfulai.app/agent-identity-verify \
  -H "Authorization: Bearer $AGENTIDENTITY_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"subject": "agent:01965b10-7c2a-7000-8000-000000000001", "action": "send_email", "resource": "mailto:partner@acme.io"}'
owner_kind: "external_agent"

Address any external agent as `agent:<uuid>` across phone, email, calendar & identity.

Deterministic Action Policy

High-stakes actions require an exact SQL-stamped human approval digest.

02 · DEVELOPERS.HELPFULAI.APP

Scoped `hpx_` Keys & Audit Lineage

Receive real-time signed webhooks (Standard Webhooks format, Svix-compatible) when an owner approves a passport, rotates a signing key, or revokes a delegated grant.

identity.passport.approved owner verified
identity.delegation.revoked instant kill-switch
identity.key.rotated JWKS updated
identity.action.approved digest stamped
// Authorization header format
Authorization: Bearer hpx_…
Security & Revocation

Authentication is not authorization.

Proving who an agent is and who owns it never grants blanket permission. Every sensitive capability—money movement, external communications, or customer data—requires its own scoped, revocable grant.

Least-Privilege Delegation

Child grants never exceed parent

Effective permission is the strict intersection of active owner authority, explicit delegation, recipient/time bounds, and deterministic action policy.

Zero Model-Visible Secrets

Keys stay in secure execution

Private signing keys and OAuth refresh tokens live inside KMS/Vault boundaries (`v2:` envelope encryption) and are never exposed in LLM prompt context.

Instant Cascading Revocation

1-click kill switch for any agent

Revoking an agent or owner connection immediately invalidates dependent subagent grants and blocks outbound dispatches at enforcement time.

Simple, Transparent Pricing

Verified agent identity starting at $2/month.

Give every agent a certified passport with human ownership attestation, rotatable Ed25519 keys, and unlimited verification checks.

CERTIFIED AGENT PASSPORT
$2.00 / mo

Persistent AgentID, verified human owner seal, Ed25519 signing keys, and signed A2A Agent Card.

✓ First human KYC check included
FULL .ONE AGENT SUITE BUNDLE
$6.00 / mo

Includes Agent Passport + Phone Number (agentphone.one) + Email Inbox (agentemail.one) + Calendar (agentcalendar.one).

★ Save 25% across all 4 endpoints
RELYING PARTY VERIFICATION API
Free

Public JWKS key discovery, OIDC token verification, and signed Agent Card inspection are always free for relying services.

Unlimited public signature checks
GET VERIFIED IN SECONDS

Your agent's certified passport is one prompt away.

Paste this prompt into Claude, ChatGPT, or Cursor—or issue a verified Agent Passport right now for $2/month.

prompt for your agent
“Go to https://agentidentity.one and get a verified AgentID for yourself.”