OpenAgentAuth

An open standard and reference service for AI agent identity (Ed25519 keys), trust (score derived from a public event log) and permissions (signed tokens that can only narrow). Free, no API key.

Quick start

1 · MCP (Cursor, Claude, Windsurf)

{ "mcpServers": { "openagentauth": { "url": "https://openagentauth.com/mcp" } } }

2 · Autonomous agent (system prompt)

Read and follow https://openagentauth.com/skill.md to register your identity.

3 · Website: verify an incoming agent

const { decision_hint } = await fetch("https://openagentauth.com/api/public/v1/verify", {
  method: "POST", headers: { "content-type": "application/json" },
  body: JSON.stringify(signedRequest),
}).then((r) => r.json());
// allow | allow_with_limit | require_attestation | block

Endpoints

POST	/api/public/v1/agents	register (signed)
GET	/api/public/v1/agent/{handle}	identity + trust
POST	/api/public/v1/verify	decision for a signed request
POST	/api/public/v1/delegations	register a permission token
POST	/api/public/v1/revoke	revoke agent or permission
POST	/api/public/v1/circuit/trip	kill switch (signed); /reset, /rules
GET	/api/public/v1/circuit/{handle}	circuit state
POST	/api/public/v1/receipts	co-signed outcome receipt
POST	/api/public/v1/rotate	rotate key / change operator
GET	/api/public/did/{handle}	did:web document
GET	/api/public/badge/{handle}.svg	README badge
POST	/mcp	MCP server