Concept
How do you verify an AI agent's identity?
You verify an AI agent's identity with the check that listing documents, and this directory does not record one shared method. The identity and trust category lists 13 listings, and Skyfire issues signed KYAPay tokens. A check the listing does not state reads not documented as of that listing's last verified date.
Last verified 2026-11-05
Sources
How to read this
Rows are alphabetical by listing name. The how cell quotes the Know Your Agent approaches table when that listing is on it. Otherwise it quotes the listing summary, or it reads not documented as of the listing last verified date. This page does not score a row.
Gap notes and alternatives pages are linked when this directory has them. A missing link means that page does not exist here. It is not a finding about the product.
The agent credentials comparison is a separate matrix. This page does not copy those cells.
A spending limit is a different control from these identity checks. Mastercard Agent Pay for Machines is on the Know Your Agent glossary as a payment rail.
| Listing | Status | Last verified | How | Source |
|---|---|---|---|---|
| 1Password for Agents | live | 2026-10-28 | Not documented as of 2026-10-28. The listing summary says: Integrations that let a supported agent sign in without receiving the password. | |
| Beltic KYA | beta | 2026-11-05 | Beltic's site says each agent gets an identity, the request carries the operator and origin, and Beltic keeps a signed record of who acted. Its SDK verifies RFC 9421 HTTP message signatures and validates agent credentials. | |
| Concordium Agent Registry | live | 2026-11-05 | CIS-8004 mints each agent as a token that points at an Agent Card. The card is also an ERC-8004 registration file and an A2A v1.0 Agent Card. CIS-8 can bind an external key. Concordium's 2026-10-20 post says x402 payments now settle on the network. | |
| Descope Envoy | live | 2026-11-04 | Consumer apps accept personal agents as delegated users under Poppy. | |
| ERC-8004 | designed | 2026-10-22 | An ERC-721 identity registry assigns the agent id and points at a registration file. Separate registries store feedback and validation results. | |
| IBM Agent Identity | live | 2026-10-28 | It uses OAuth, short-lived, task-scoped tokens and preserves on-behalf-of delegation. | |
| Infisical open source Agent Vault | beta | 2026-10-28 | Not documented as of 2026-10-28. The listing summary says: Open source HTTP credential proxy from Infisical, separate from the Self Labs Agent Vault listing. | |
| Microsoft Entra Agent ID | live | 2026-10-28 | The tenant creates agent identities from blueprints. Authentication can use OAuth 2.0. Microsoft also lists MCP and A2A, and says Agent ID is available for all Microsoft Entra customers. | |
| ServiceNow AI Passport | designed | 2026-10-21 | Cryptographically signed credential an AI agent refers to at runtime to verify its authorized scope. | |
| Skyfire | live | 2026-10-23 | The buyer agent creates a signed JWT. A kya token carries identity claims. A pay token carries the amount the seller charges after delivery. A kya-pay token carries both. Buyers and sellers exchange the token directly. | |
| Socure Agent Intelligence | beta | 2026-10-28 | Agent Detection is generally available inside Socure Digital Intelligence and returns a confidence score and reason codes. | |
| Visa Trusted Agent Protocol | live | 2026-11-04 | The agent adds an RFC 9421 HTTP message signature. The merchant rebuilds the signed material and checks it with the agent's public key. | |
| Web Bot Auth | beta | 2026-10-30 | The client signs the request and publishes public keys in a directory. The Signature-Agent header points at that directory. Cloudflare's docs describe transitive trust from the site owner to the bot operator to the end user, and an experimental Forwarded header that names the operator. | |
| x401 | beta | 2026-11-03 | The server sends a PROOF-REQUEST header carrying an OpenID4VP request. The agent returns a PROOF-RESPONSE. The draft is version 0.2.0. |
Related questions
Related concepts
- Agent spend controls
Agent spending is bounded only where a vendor document states the bound.
- Can an AI agent raise its own spending limit?
Yes, if the approval step for a cap change reaches a channel the agent can read.
- How AI agents pay
As of 2026-11-05, this directory records 8 card tagged payment rails, 3 HTTP 402 protocol columns, 3 commerce protocol listings, and 15 agent wallet rows.
- How do you revoke an AI agent's credentials?
An agent credential can be revoked only where a checked page states the path.
- How is x402 volume measured
As of 2026-10-29, x402.org no longer published the Last 30 Days panel that showed 75.41M transactions and $24.24M volume through at least 2026-10-20, and x402scan showed 3,247,612 transactions and $1.58M under Past 30 Days.
- KYA vs KYC: what is the difference?
Know Your Agent is the check a merchant or service runs before it lets an agent transact.
- What is the agent economy
The agent economy is software agents that discover services, pay, prove identity, and act under spend limits on behalf of people or businesses.
- Which agent identity standards exist?
Identity listing text names four records as a draft or a specification: ERC-8004, a draft Ethereum proposal; Web Bot Auth, an IETF working group draft and not yet a standard; x401, a draft HTTP protocol; and Visa Trusted Agent Protocol, a Visa specification.
- Who handles a refund when an agent pays
A refund follows the page for that rail.
- x402 volume, claimed and measured
Public x402 volume figures disagree, and this page does not merge them.
Questions
- How do you verify an AI agent's identity?
- You verify an AI agent's identity with the check that listing documents, and this directory does not record one shared method. The identity and trust category lists 13 listings, and Skyfire issues signed KYAPay tokens. A check the listing does not state reads not documented as of that listing's last verified date.
- Which listings document a check?
- Beltic KYA, Concordium Agent Registry, Descope Envoy, ERC-8004, IBM Agent Identity, Microsoft Entra Agent ID, ServiceNow AI Passport, Skyfire, Socure Agent Intelligence, Visa Trusted Agent Protocol, Web Bot Auth, x401.
- Which rows read not documented?
- 1Password for Agents, Infisical open source Agent Vault. Not documented as of 2026-10-28 means that cell quotes the listing summary and does not add a check.
- Does this page score a listing?
- No. Rows are alphabetical by listing name. A quoted check is not a recommendation.
Sources
- 1Password for Agents
- 1Password support: security of 1Password for Claude
- Beltic site
- Beltic press release, 2026-09-30
- Beltic KYA TypeScript SDK
- Concordium Agent Registry reference
- Concordium Agent Card reference
- Concordium Agent Registry update, 2026-10-20
- Descope Unveils Envoy, an Identity-Aware Way For Personal AI Agents to Act on People's Behalf
- Descope docs: Personal Agent Protocol (Poppy)
- ERC-8004 Trustless Agents
- IBM Agent Identity is now generally available: Building trust for the agentic era
- IBM Introduces Identity and Control for AI Agents, Securing Frontier Intelligence for the Enterprise
- Strengthen security for agentic AI with new Vault, Verify, Boundary, and Secure Hub capabilities
- Infisical Agent Vault README
- Agent Vault documentation introduction
- Infisical docs: Agent Vault
- What is Microsoft Entra Agent ID
- ServiceNow newsroom, 2026-10-15
- ServiceNow newsroom, 2026-10-21
- Skyfire KYAPay token documentation
- Skyfire Know Your Agent documentation
- KYAPay token Internet-Draft
- Socure Launches Agent Intelligence to Bind Every Agent to the Verified Human Behind It
- Socure newsroom: Agent Intelligence launch, 27 October 2026
- Introducing Agent Intelligence: Detection, identity, and trust evaluation for AI agents
- Visa Trusted Agent Protocol getting started
- Visa press release on live agentic transactions in Europe, 2026-07-02
- IETF draft for HTTP Message Signatures for automated traffic
- Cloudflare Web Bot Auth documentation
- x401 HTTP proof requirement protocol