The Trusted Agentic Commerce Protocol

Comments (1)

oellenbogen · 9h ago

Sharing a proposal for a secure authentication and data encryption protocol for AI agents, merchants and merchant vendors. It combines:

- JWT with digital signatures for request authentication (RSA or EC) - JSON Web Encryption (JWE) for sensitive data protection - JSON Web Key Sets (JWKS) for key distribution

Taking inspiration from ideas like Cloudflare’s essential Web Bot Auth, we've mapped out a comprehensive standard that captures the key use cases to enable safe, secure agentic commerce – from capturing intent, consent and user preferences, to handling cart items, payment details, and order statuses.

Ask HN: The government of my country blocked VPN access. What should I use?

Ask HN: Where can I see a live octopus in Maine?

Ask HN: Why hasn't x86 caught up with Apple M series?

CompactifAI Inference API

Ask HN: Anyone working on bringing software back from US clouds?

Ask HN: How can I recover and run my old mobile game from the 2010s?

Petition to stop Google from restricting sideloading and FOSS apps

Ask HN: Windows 11 Update Fail – Linux Distro Suggestions?

Anthropick.com Redirects to ChatGPT

Ask HN: Did modern AI's coding abilities make you lose interest in programming?

Ask HN: GitHub Copilot down?

Ask HN: What are the best Google alternatives in 2025?

Ask HN: What to Do with Old iPads?

Ask HN: What to Learn for Math for Modeling?

Units of Economics of LLMs. Reply to Ed Zitron's "AI Is a Money Trap"

Ask HN: How to Learn to Build Agentic AI Systems (Like Claude Code)

Ask HN: Does sentience put stress on the brain?

Ask HN: Best codebases to study to learn software design?

Ask HN: What measures are you taking to stop AI crawlers?

Ask HN: Is there a temp phone number like temp email?

Ask HN: Is backlink trading still a problem worth solving?

Out of curiosity: what kind of people use this "forum" (I mean Hacker News)?

Ask HN: Why are so many services rejecting Google Voice numbers for signups?

Ask HN: What should I use to run React Native tests on a device?

Stop squashing your commits. You're squashing your AI too

Tell HN: any reasonably used DB will likely outlast the programs using it

Ask HN: Are AI filters becoming stricter than society itself?

Ask HN: Any experienced devs who use AI extensively in their work?

Ask HN: I just abandoned my PyCharm subscription, what should I use now?

Ask HN: How are you attributing your AI usage when developing software?

Patient Lisp Hacker Seeks Same for Long Walks Through IPL-V Code

Ask HN: Has anyone else used online communities that are archetypically "savvy"?

Ask HN: How do you find early stage startups to join

High rate of LLM (GPT5) hallucinations in dense stats domains (cricket)

Ask HN: What are you working on (August 2025)?

429 Too Many Requests from registry.npmjs.org

Ask HN: Best Marketplaces for Used Servers?

Ask HN: Does using public transportation make you more creative than driving?

The Trusted Agentic Commerce Protocol

Comments (1)