See it in action
An agent, its wallet, and the proof it shows.
Soon, many sign-ins won't be people. The web needs to trust the agents acting for us, with credentials they hold, sites can verify, and people control.
- Hi Ada, I'm your new Acme assistant. To act for you, I need a verified identity from Acme AI.
Acme AI · approval needed
Activate your agent
- Acme AI issues this agent a credential
- certified for: bookings, purchases
Approve✓ Approved by Ada- Asked my wallet to accept Acme AI's offerA2WP
- Acme AI issued Verified agent to my walletOpenID4VCI
- All set. Sites can now check I'm a genuine, accountable agent.
- Order a bottle of wine for Friday's team dinner.
- The store will ask if you're over 18. Can I prove that for you?
Ada's wallet · approval needed
Delegate to your agent
- Age · Gov ID
- share only age_over_18
- valid 30 days · bound to this agent
Approve✓ Approved by Ada- Your wallet delegated age_over_18 to my walletdSD-JWT · expires 6 Nov
- store.example asks: Is the buyer over 18?
- Asked my wallet to answer itA2WP · the wallet decides what to share
- Presenting age_over_18: truedelegated by Ada · OpenID4VP
- store.example verifiedGov ID signed it · Ada delegated it · not expired
- Ordered. Your name and birthdate weren't shared.
- Also book my flight to Singapore for Tuesday.
- flights.example only accepts verified agents: Who are you, and who is accountable for you?
- Asked my wallet to answer itA2WP
- Presenting Verified agentissued by Acme AI · OpenID4VP
- flights.example verifiedgenuine Acme AI agent · certified for bookings
- Booked SQ 403, Tue 08:40.
Ada's wallet
Issuer
Acme AI
makes and runs the agent
Agent wallet
Delegated by Ada
Agent's own
Verifier
store.example
Is the buyer over 18?
Delegated credential verified
Verifier
flights.example
Is this a verified agent?
Agent credential verified
A2WPThe agent never touches the credentials. It talks to its wallet over A2WP.See how A2WP works
Why not just an API key?
Keys say who holds them. Credentials say what is true, and who vouches for it.
| API key | Verifiable credential | |
|---|---|---|
| Proves | Someone has the key | A signed fact, from an issuer you trust |
| Reveals | Whatever the account can reach | Only the claims asked for |
| Limits | Usually all or nothing | Scoped and time-boxed by the person |
| If it leaks | Anyone can use it | Useless without the agent's key |
| Checked by | Calling the service that issued it | Verifying a signature, anywhere |
Go deeper
Protocol
Tools