Agent Identity Registry Protocol Community Group

Although autonomous AI agents increasingly operate across organizational boundaries —negotiating, transacting, and making decisions on behalf of humans and organizations— there is no agreed upon mechanism for verifying an agent's identity, its controlling entity, or its authorization scope before interaction begins. This gap creates accountability, security, and liability challenges that multiple industry and government bodies have identified as urgent, including NIST's AI Agent Identity initiative and the OpenID Foundation's AIIM working group.

This Community Group develops open specifications for verifiable AI agent identity infrastructure. The group's work addresses how AI agents can present cryptographically verifiable credentials that bind them to their controlling organizations, enabling cross-organizational trust negotiation without requiring pre-existing bilateral agreements.

The group's scope includes:

• A DID method specification for agent identity resolution
• An agent credential format based on W3C Verifiable Credentials
• A trust negotiation protocol for cross-organizational agent interactions
• Trust level definitions and verification requirements
• Integration profiles with complementary protocols (MCP, A2A, OAuth/OIDC, SPIFFE)
• Revocation and credential lifecycle management
• Post-quantum cryptographic requirements for agent identity

Note: This group will take inspiration from work created by TrustLayer Foundation A.C., and that work may inform the group's discussions. That work does not constrain the group's discussions, and all decisions about the group's deliverables will be made by the Community Group participants.

Coordination is anticipated with the W3C Credentials Community Group (CCG), the Decentralized Identity Foundation (DIF), the OpenID Foundation AIIM Community Group, and the IETF WIMSE Working Group.

Homepage

Homepage/Blog

Shortname

agent-identity

Participation

Links

 Mailing List

public-agent-identity