AI Agent Authentication and Authorization (AIMS) vs WIMSE AI Identity Management System (AIMS)
The map lists them as complementary: sites and agents commonly implement both. They share the acronym AIMS but are unrelated protocols.
| AI Agent Authentication and Authorization (AIMS) AIMS | WIMSE AI Identity Management System AIMS | |
|---|---|---|
| Lifecycle step | 2 Identify: Who is this agent? Who is this site? | 2 Identify: Who is this agent? Who is this site? |
| Answers | Is there an IETF-endorsed way to authenticate and authorize an AI agent, and has the WIMSE working group actually taken this on? | What are the best practices for authenticating and authorising interactions between AI agents and the services they call? |
| Governed by | IETF WIMSE Working Group (adopted as draft-ietf-wimse-aims) | IETF WIMSE Working Group (WG document) |
| Status (issuer's words) | Replaced by draft-ietf-wimse-aims-00 (WG document, 2026-09-15) | Working group document, draft-ietf-wimse-aims-00 (2026-09-15) |
| Version | draft-ietf-wimse-aims-00 (WIMSE WG document, expires 2027-03-19); replaces draft-klrc-aiagent-auth-03 (2026-09-15) | draft-ietf-wimse-aims-00 (2026-09-15) |
| Form / transport | document format | document format |
| Found at | none | none; a best-practices document, not a discoverable wire protocol |
| Implementation | none found — The document's own authors and IdPro commentary describe it as broad list support (an "A" majority in the WIMSE WG adoption call closing 2026-08-24); the datatracker WIMSE WG document list, checked 2026-09-07, does not yet show a WG-adopted version (no draft-ietf-wimse-aiagent-auth exists) | none found |
| Evidence | 5 verified, 2 reported | 3 verified |
| Primary use case | Prove an agent's identity | Prove an agent's identity |
| Last verified | 2026-10-23 (current) | 2026-10-23 (current) |
| Specification | https://datatracker.ietf.org/doc/draft-ietf-wimse-aims/ | https://datatracker.ietf.org/doc/draft-ietf-wimse-aims/ |
When to use which
- Choose AI Agent Authentication and Authorization (AIMS) when your question is “Is there an IETF-endorsed way to authenticate and authorize an AI agent, and has the WIMSE working group actually taken this on?” and you accept its maturity: status "Replaced by draft-ietf-wimse-aims-00 (WG document, 2026-09-15)", implementation none found (The document's own authors and IdPro commentary describe it as broad list support (an "A" majority in the WIMSE WG adoption call closing 2026-08-24); the datatracker WIMSE WG document list, checked 2026-09-07, does not yet show a WG-adopted version (no draft-ietf-wimse-aiagent-auth exists)).
- Choose WIMSE AI Identity Management System when your question is “What are the best practices for authenticating and authorising interactions between AI agents and the services they call?” and you accept its maturity: status "Working group document, draft-ietf-wimse-aims-00 (2026-09-15)", implementation none found.
Read the full articles
- AI Agent Authentication and Authorization (AIMS): Is there an IETF-endorsed way to authenticate and authorize an AI agent, and has the WIMSE working group actually taken this on?
- WIMSE AI Identity Management System: What are the best practices for authenticating and authorising interactions between AI agents and the services they call?