A field guide · open standards

Verifiable credentials for AI agents.

Agents book, buy and sign in for us. Verifiable credentials let them prove who they are and what you allowed them to do, and reveal nothing else.

Open standards · OpenID4VCI · OpenID4VP · SD-JWT VC · A2WP

See it in action

An agent, its wallet, and the proof it shows.

Soon, many sign-ins won't be people. The web needs to trust the agents acting for us, with credentials they hold, sites can verify, and people control.

Acme assistantAda's personal agent
  1. Hi Ada, I'm your new Acme assistant. To act for you, I need a verified identity from Acme AI.
  2. Acme AI · approval needed

    Activate your agent

    • Acme AI issues this agent a credential
    • certified for: bookings, purchases
    Approve✓ Approved by Ada
  3. Asked my wallet to accept Acme AI's offerA2WP
  4. Acme AI issued Verified agent to my walletOpenID4VCI
  5. All set. Sites can now check I'm a genuine, accountable agent.
  6. Order a bottle of wine for Friday's team dinner.
  7. The store will ask if you're over 18. Can I prove that for you?
  8. Ada's wallet · approval needed

    Delegate to your agent

    • Age · Gov ID
    • share only age_over_18
    • valid 30 days · bound to this agent
    Approve✓ Approved by Ada
  9. Your wallet delegated age_over_18 to my walletdSD-JWT · expires 6 Nov
  10. store.example asks: Is the buyer over 18?
  11. Asked my wallet to answer itA2WP · the wallet decides what to share
  12. Presenting age_over_18: truedelegated by Ada · OpenID4VP
  13. store.example verifiedGov ID signed it · Ada delegated it · not expired
  14. Ordered. Your name and birthdate weren't shared.
  15. Also book my flight to Singapore for Tuesday.
  16. flights.example only accepts verified agents: Who are you, and who is accountable for you?
  17. Asked my wallet to answer itA2WP
  18. Presenting Verified agentissued by Acme AI · OpenID4VP
  19. flights.example verifiedgenuine Acme AI agent · certified for bookings
  20. Booked SQ 403, Tue 08:40.

Ada's wallet

AgeGov ID
EmployeeExample Corp

Issuer

Acme AI

makes and runs the agent

Agent wallet

Delegated by Ada

empty
age_over_18expires 6 Nov

Agent's own

empty
Verified agentAcme AI

Verifier

store.example

Is the buyer over 18?

Delegated credential verified

Verifier

flights.example

Is this a verified agent?

Agent credential verified

Ada approves her new agent, and Acme AI issues it a Verified agent credential. When she asks it to order wine, she approves a delegation from her own wallet, so the agent can prove only that she is over 18. The store checks the delegated credential; a flight site checks the agent's own credential.

A2WPThe agent never touches the credentials. It talks to its wallet over A2WP.See how A2WP works

Why not just an API key?

Keys say who holds them. Credentials say what is true, and who vouches for it.

API keyVerifiable credential
ProvesSomeone has the keyA signed fact, from an issuer you trust
RevealsWhatever the account can reachOnly the claims asked for
LimitsUsually all or nothingScoped and time-boxed by the person
If it leaksAnyone can use itUseless without the agent's key
Checked byCalling the service that issued itVerifying a signature, anywhere