Know Your Agent
Know Your Agent: identify the operator and define authority
Decide who may operate an agent and which actions they are allowed to authorize.
01A verified person
Example flow
Grant a defined scope
An accountable agent
Identity and authorization remain distinct
The job
- Anyone can spin up an agent, and nothing distinguishes one operator from a thousand.
- Rate limits and API keys tell you about traffic, not about who is behind it.
- When an agent causes harm, there is no person the record points to.
How it works.
- 01
Set the operator requirement
Choose the identity evidence your platform requires from an operator.
- 02
Define the agent’s access
Specify the tools and actions available to the agent.
- 03
Record approval decisions
Use the authorization record to trace who approved a request.