{
 "id": "aip-delegation-chain",
 "name": "Agent Identity Protocol (AIP): Verifiable Delegation for AI Agent Systems",
 "acronym": "AIP",
 "aliases": [
  "Agent Identity Protocol",
  "draft-prakash-aip"
 ],
 "collisions": [
  "aip"
 ],
 "step": "permit",
 "parties": [
  "agent-agent"
 ],
 "form": "document-format",
 "track": "ietf",
 "scope": "general",
 "question": "How can a relying party verify from a token and the issuer's public key who delegated authority, which agents it passed through, and that no hop widened it, when no authorization server is on the path?",
 "analog": "Attenuable capability tokens (Biscuit), applied to agent-to-agent subdelegation",
 "origin": {
  "org": "Independent (S. Prakash)",
  "date": null
 },
 "governance": "Individual Internet-Draft by a single independent author; Intended Status: Standards Track",
 "native_status": "Internet-Draft, Intended Status: Standards Track; expires 13 April 2027",
 "phase": "draft",
 "implementation": "unknown",
 "adoption": {
  "level": "unmeasured",
  "by": null,
  "probe_run": null
 },
 "version": {
  "label": "draft-prakash-aip-02",
  "date": "2026-10-10"
 },
 "spec_url": "https://datatracker.ietf.org/doc/html/draft-prakash-aip-02",
 "discovery": {
  "mechanism": "Self-signed agent identity document at a well-known HTTPS path derived from the aip:web identifier",
  "path": "/.well-known/aip/<path>.json"
 },
 "probe": {
  "method": "GET",
  "path": "/.well-known/aip/<path>.json",
  "parse": "Parse JSON; check aip equals \"1.0\", id is an AIP identifier, and document_signature verifies over the JCS-canonicalized document",
  "on_absent": "Treat the site or agent as not supporting AIP"
 },
 "evidence": [
  {
   "claim": "The draft specifies AIP, a delegation chain model with an attenuation invariant, a verification algorithm, JWT-chain and Biscuit encodings, and bindings for MCP, A2A and HTTP.",
   "label": "REPORTED",
   "url": "https://datatracker.ietf.org/doc/html/draft-prakash-aip-02",
   "date": "2026-10-10"
  }
 ],
 "summary_md": "AIP conveys delegated authority along a chain of AI agents so a relying party can verify the grantor, the path, and that each hop only narrowed authority. It defines an encoding-neutral chain model with a single attenuation invariant, a normative verification algorithm, and two encodings (a JWT chain and a Biscuit token with Datalog policy). It defines bindings for MCP, A2A and generic HTTP, and is intended to compose with the AIMS framework. Agent identifiers are aip:web (DNS-based) or aip:key (self-certifying Ed25519).",
 "part_of": null,
 "group": null,
 "candidate": true,
 "confidence": 0.8,
 "use_cases": [
  "delegate-user-authority",
  "prove-agent-identity"
 ],
 "audience": [
  "agent-builder",
  "standards-body"
 ],
 "pairs_with": [
  "mcp",
  "a2a",
  "wimse-aims"
 ],
 "prerequisites": [],
 "dispute": null,
 "last_verified": "2026-10-18",
 "history": [
  {
   "date": "2026-10-16",
   "note": "auto-drafted candidate from exa (https://datatracker.ietf.org/doc/html/draft-prakash-aip-02)"
  }
 ],
 "watch": [
  {
   "type": "page",
   "url": "https://datatracker.ietf.org/doc/html/draft-prakash-aip-02"
  }
 ],
 "freshness": "current"
}