Skip to content
↑↓ to move · Enter to openEsc to close
Example verification flowTransition

The agentic internet: when an AI agent is on the other end

The web was built around a person on one end of every transaction: someone who logs in, clicks buy and answers for what happens next. AI agents change that. More and more often the party calling, ordering or negotiating is software acting for a person or a company, and sometimes both sides are agents.

Accounts, passwords and payment cards all assume a human is present. This comparison shows what breaks when one isn't, and what a portable agent identity puts back.

Ready
Today
Human
A person
Types, taps, waits
Interface
A website or an app
Identity handled by a login
Transaction
Transaction

One human, one account, one session. The question of who is acting never comes up.

The agentic internet
Human
A person
Says what they want, once
Personal agent
Acts on their behalf
Calls, negotiates, books
Business agent
Answers for the business
No human in the loop
Transaction
Transaction

Two agents, no shared account, no session, no face. Each one is a claim until something checks it.

?

Who identifies the agents?

Not the platform they happen to be on. Not the sentence they say about themselves.

AgenIDagenid:01J8Z3K3F2QZ9X6V7R4T8N2W5Y
A persistent identityPORTABLE
An accountable operatorDECLARED
Specific claims, independently checkedVERIFIED

Checkable by a person, a program, an auditor, or another agent — without trusting AgenID’s own database.

Before you trust an AI agent, resolve its AgenID.

Trust the proof. Not the platform.
What AgenID proves here

That an agent controls the identity it presented, and which specific claims about it an independent authority has verified. It does not make the agent safe, legitimate, or permitted — those are separate judgements for whoever is on the other side.

Illustration, not deployment

These scenarios illustrate the protocol's verification model. The reference deployment at agenid.com issues nothing above L1_REGISTERED today: L2 and higher require a VerificationAssertion signed by a root authority key, and that key has not been created. L5 is reserved by the spec and is not issuable at all.

Challenge–response is a proposed interaction pattern. v1.1.1 defines the signed objects, not this exchange.

Why existing logins don't answer the question

A login proves someone knew a password for one account on one service. It says nothing portable about the agent using it, and nothing a third service can check. When an agent moves between an airline, a hotel and a payment processor, each of them starts from zero.

Platform-issued identities have the same limit in a different shape: they are only as good as your relationship with that platform, and they don't travel with the agent.

What a portable agent identity adds

AgenID gives each agent one identifier that works everywhere and is backed by its operator's signature. Any counterparty can resolve it and re-check the signature without an account, an API key or a business relationship with AgenID. Specific claims about the operator can then be verified by an authority and scoped to exactly what was checked.

The result is a stable answer to "who is this agent, and who answers for it?" that holds across platforms and over time.

What it deliberately does not do

AgenID is not a login system, a payment rail or a permissions engine. It does not decide what an agent may do and it never holds an operator's signing key. It is the identity layer those systems can read from.

Today the reference registry at agenid.com issues DECLARED and L1_REGISTERED. The higher levels shown in this illustration require an assertion signed by a root authority key that has not been created yet, so they describe how the protocol works rather than something you can obtain today.

Frequently asked questions

What is the agentic internet?

It is the version of the web in which AI agents browse, buy, book and negotiate on behalf of people and companies, often transacting with other agents rather than with humans.

Why can't agents just use their owner's login?

A shared login proves knowledge of a password, not which agent is acting or who is accountable for it. It also can't be checked by any service other than the one that issued it.

Is AgenID tied to one AI platform?

No. The identifier and the signed manifest are platform independent, and verification uses open standards: Ed25519 signatures over RFC 8785 canonical JSON.

Does AgenID decide what an agent is allowed to do?

No. AgenID answers which agent is acting and who declared it. What that agent is allowed to do stays with the business on the other side and with the operator that runs the agent. Protocol v1.1.1 defines no signed authorization object.

Integration patterns for this scenario

How the identity travels through platforms agents in this scenario commonly run on. Each brief is a pattern using the platform’s documented APIs, not a shipped adapter package.

Give your agent an identity

Register an agent in the browser — the signing key is generated on your device and never sent to AgenID — or resolve an existing AgenID and re-check its signature yourself.