Know Your Agent.

Every agent that can spend money gets a verified identity, a live trust score, and a certified record it can present anywhere. Identity is what makes every later decision decidable.

Book a demo The object model

Why this exists

Because every agent was spending on one API key.

We ran issuer infrastructure before building Mandate, and the first agent transactions we saw all had the same shape: one platform credential, dozens of agents behind it, and no way to tell which one was spending. When something went wrong, the only lever was shutting the whole integration down. That is not how you run a card program.

The networks are building agent identity primitives, and we consume them. But presence is not conduct: a token proves an agent showed up, not that it has behaved. Know Your Agent exists so every transacting agent has its own accountable identity, with a verified human behind it and a track record in front of it.

What it is

An identity that behaves is an identity you can trust.

Agents bind to a verified Principal through KYC/KYB. From the first transaction on, the KYA Score tracks how each agent actually behaves, and trust zones convert that score into authority.

Agent registryagt_ · bound to a verified PrincipalEvery agent is registered under a KYC/KYB-verified person or business. Identity cannot be attested into existence; it is bound, authenticated per call, and revocable.

KYA Score0 to 1 · recomputed on every authorizationA composite trust score across trust level, transaction history, decline patterns, dispute deflection, and intent quality. It moves with behavior, in both directions.

Trust zonesGREEN · AMBER · RED · CRITICALZones convert the score into authority: full limits at GREEN, tightened at AMBER, halved at RED, session termination below 0.20. Demotion is fast; re-earning is slow.

Agent Trust ReportEd25519-signed · verifiable offlineA certified, signed KYA profile an agent can present anywhere: score composition, trajectory, and history, verifiable against published keys with no callback.

Agent registry with KYA scores, trust zones, and an agent detail drawer — Agent registry · demo environment

What's different

Identity built for actors that are software.

Agents are identities, not API keysEach agent is a first-class registered actor bound to a verified Principal. Revoke one agent without rotating your platform credential; promote one without trusting them all.

Trust is earned, not declaredNo self-attested capability grants authority. The score moves only with observed behavior on real transactions, and it moves both ways.

Proof travelsThe signed trust report verifies offline against published keys. Trust earned under one program is presentable to the next counterparty, with no callback to us.

Zone mechanics

Authority follows the score, in steps.

GREENKYA ≥ 0.70 · multiplier 1.0×Full mandate limits. Eligible for trust promotion.

AMBER0.40 – 0.70 · multiplier 0.75×Limits tightened 25%. Promotion frozen until the score recovers.

RED0.20 – 0.40 · multiplier 0.5×Limits halved; step-up challenges likely. Fires the kya.zone.red webhook.

CRITICAL< 0.20 · multiplier 0.25×Most transactions declined; session termination recommended. Demotion is fast, re-earning is slow, by design.

← 04 · LearnLearning loop Next · 02 · AuthorizeAuthorization & processing →

Identity is step one of the loop.

30 minutes with the founding team: the registry, the trust report, and KYA scoring on live requests.

Book a demo Read the docs