What is Know Your Agent (KYA), and how does a business let AI agents in safely?
Know Your Agent is checking which AI agent is approaching, who it acts for and what that person authorised, before it is allowed to act. sebbi.pro gives any business a ready-made KYA gate at sebbi.pro/know-your-agent. It recognises the agent by verifying its signed HTTP request (RFC 9421 HTTP Message Signatures, the Web Bot Auth scheme Visa's Trusted Agent Protocol and Mastercard Agent Pay build on), checks a sebbi.pro Agent Passport naming the person who authorised the one action at the one site, and applies the business's own policy per action: allowed, needs a person's approval, or refused, with amount and daily limits. Permission can be withdrawn from any agent at once. Every decision, approval and withdrawal is sealed and timestamped in Bitcoin.
How it works
- Publish your policy with POST /x/kya/policy: which actions outside agents may take, limits, and which need a person.
- Pass each agent request's headers and Agent Passport to POST /x/kya/check.
- Serve ALLOW, refuse DENY, and hold NEEDS_HUMAN for a person to approve.
- Withdraw permission with POST /x/kya/block; read the sealed record with GET /x/kya/log.