Sharing a proposal for a secure authentication and data encryption protocol for AI agents, merchants and merchant vendors. It combines:
- JWT with digital signatures for request authentication (RSA or EC)
- JSON Web Encryption (JWE) for sensitive data protection
- JSON Web Key Sets (JWKS) for key distribution
Taking inspiration from ideas like Cloudflare’s essential Web Bot Auth, we've mapped out a comprehensive standard that captures the key use cases to enable safe, secure agentic commerce – from capturing intent, consent and user preferences, to handling cart items, payment details, and order statuses.
- JWT with digital signatures for request authentication (RSA or EC) - JSON Web Encryption (JWE) for sensitive data protection - JSON Web Key Sets (JWKS) for key distribution
Taking inspiration from ideas like Cloudflare’s essential Web Bot Auth, we've mapped out a comprehensive standard that captures the key use cases to enable safe, secure agentic commerce – from capturing intent, consent and user preferences, to handling cart items, payment details, and order statuses.