--- type: Agentic Web Standard title: "AI Agent Authentication and Authorization" description: "What was draft-klrc-aiagent-auth, and what replaced it?" resource: "https://datatracker.ietf.org/doc/draft-klrc-aiagent-auth/" tags: ["identify", "document-format", "ietf", "prove-agent-identity", "delegate-user-authority", "audit-agent-actions"] status: draft generated: { by: agenticweb-builder/1.0, at: 2026-10-30T00:00:00Z } verified: { by: process:agenticweb-engine, at: 2026-10-30T00:00:00Z } stale_after: 2026-11-29T00:00:00Z sources: - id: ref-1 resource: "https://datatracker.ietf.org/doc/draft-klrc-aiagent-auth/" title: "IETF Datatracker, draft-klrc-aiagent-auth (status page): \"Replaced Internet-Draft (wimse WG) Expired & archived\" \"Last updated 2026-09-09 (Latest revision 2026-07-06)\" \"Replaced by draft-ietf-wimse-aims\"" last_modified: 2026-10-30T00:00:00Z - id: ref-2 resource: "https://datatracker.ietf.org/doc/draft-ietf-wimse-aims/" title: "IETF Datatracker, draft-ietf-wimse-aims (status page): \"Active Internet-Draft (wimse WG)\" \"Replaces draft-klrc-aiagent-auth\" \"WG state WG Document\"" last_modified: 2026-10-30T00:00:00Z - id: ref-3 resource: "https://datatracker.ietf.org/doc/draft-klrc-aiagent-auth/history/" title: "IETF Datatracker, draft-klrc-aiagent-auth history page: \"2026-09-09 03 Justin Richer IETF WG state changed to Adopted by a WG\" \"2026-07-06 03 Pieter Kasselman New version available: draft-klrc-aiagent-auth-03.txt\" \"2026-06-01 02 Pieter Kasselman New version available: draft-klrc-aiagent-auth-02.txt\" \"2026-03-30 01 Pieter Kasselman New version available: draft-klrc-aiagent-auth-01.txt\" \"2026-03-02 00 Pieter Kasselman New version available: draft-klrc-aiagent-auth-00.txt\"" last_modified: 2026-10-30T00:00:00Z - id: ref-4 resource: "https://www.ietf.org/archive/id/draft-klrc-aiagent-auth-00.txt" title: "P. Kasselman (Defakto Security), J. Lombardo (AWS), Y. Rosomakho (Zscaler) and B. Campbell (Ping Identity), AI Agent Authentication and Authorization, draft-klrc-aiagent-auth-00, 2 March 2026: \"B. Campbell Ping Identity 2 March 2026\" \"This document proposes a model for authentication and authorization of AI agent interactions.\"" last_modified: 2026-10-30T00:00:00Z - id: ref-5 resource: "https://www.ietf.org/archive/id/draft-klrc-aiagent-auth-03.txt" title: "P. Kasselman, J. Lombardo, Y. Rosomakho, B. Campbell, N. Steele (OpenAI) and A. Parecki (Okta), AI Agent Authentication and Authorization, draft-klrc-aiagent-auth-03, 6 July 2026: \"Intended status: Informational\" \"N. Steele OpenAI A. Parecki Okta 6 July 2026\" \"This document proposes best practices for authentication and authorization of AI agent interactions.\" \"Rather than defining new protocols, this document describes how existing and widely deployed standards can be applied or extended to establish agent authentication and authorization.\" \"This document has no IANA actions.\"" last_modified: 2026-10-30T00:00:00Z - id: ref-6 resource: "https://datatracker.ietf.org/doc/minutes-126-wimse-202607201200/" title: "IETF, Minutes IETF126: wimse, 20 July 2026: \"AI Agent Authentication and Authorization (10 min): Yaroslav Rosomakho\" \"Yaroslav asks to consider adoption in the WG.\"" last_modified: 2026-10-30T00:00:00Z - id: ref-7 resource: "https://mailarchive.ietf.org/arch/msg/wimse/I0RFmUD4Ry7ZrZ4QkFywer1SkGA/" title: "J. Richer (WIMSE chair), wimse mailing list, call for adoption, 10 August 2026: \"Mon, 10 August 2026 19:01 UTC\" \"the chairs would like to call for adoption of\" \"Please reply to the list by August 24, 2026.\" \"As Pieter is co-author of this document, he has recused himself as chair of any process regarding this work should it continue in the working group, starting with this call for adoption.\"" last_modified: 2026-10-30T00:00:00Z - id: ref-8 resource: "https://mailarchive.ietf.org/arch/msg/wimse/ipoTMCLvV79Q3gJ1vP3lFtStDiI/" title: "J. Richer (WIMSE chair), wimse mailing list, adoption result, 9 September 2026: \"Wed, 09 September 2026 16:56 UTC\" \"has been adopted as a working group item for WIMSE.\" \"the text of this document is not sacred: it is a starting point for us to dig in and do the work to solve the problems.\" \"Please publish a -00 version with the same content as the latest I-D.\"" last_modified: 2026-10-30T00:00:00Z - id: ref-9 resource: "https://datatracker.ietf.org/doc/draft-ietf-wimse-aims/history/" title: "IETF Datatracker, draft-ietf-wimse-aims history page: \"This document now replaces draft-klrc-aiagent-auth instead of None\" \"Justin Richer WG -00 approved\"" last_modified: 2026-10-30T00:00:00Z - id: ref-10 resource: "https://datatracker.ietf.org/wg/wimse/about/" title: "IETF Datatracker, Workload Identity in Multi System Environments (wimse) working group page: \"Chairs Justin Richer, Pieter Kasselman\"" last_modified: 2026-10-30T00:00:00Z --- # AI Agent Authentication and Authorization AI Agent Authentication and Authorization is an agentic-web standard (document format) at step 2, Identify, governed by IETF WIMSE working group, which adopted the work on 2026-09-09: IETF WG state changed to Adopted by a WG; its status is "Replaced". It answers: "What was draft-klrc-aiagent-auth, and what replaced it?" Implementation status is none found, last verified 2026-10-30. # Overview AI Agent Authentication and Authorization was an individual Internet-Draft about how AI agents should prove who they are and what they may do. It used existing standards rather than a new protocol [^ref-5]. Its first revision, by four authors, "proposes a model for authentication and authorization of AI agent interactions" [^ref-4]. By draft-klrc-aiagent-auth-03 there were six authors, and the draft "proposes best practices" instead [^ref-5]. The WIMSE working group took it up in 2026, and its text continued as draft-ietf-wimse-aims, which is tracked on the AIMS page [^ref-1][^ref-2][^ref-8]. ### How it got here - **20 July 2026, IETF 126.** Rosomakho presented the draft to WIMSE: "Yaroslav asks to consider adoption in the WG." [^ref-6] - **10 August 2026.** The chair opened a call for adoption, saying "the chairs would like to call for adoption of" the draft, with the request "Please reply to the list by August 24, 2026." [^ref-7] - **9 September 2026.** The chair announced that the draft "has been adopted as a working group item for WIMSE." He also wrote that "the text of this document is not sacred: it is a starting point for us to dig in and do the work to solve the problems." [^ref-8] - **After adoption.** Datatracker records that the working-group draft "now replaces draft-klrc-aiagent-auth" [^ref-9]. It also shows this draft as "Replaced by draft-ietf-wimse-aims" [^ref-1]. # Examples ```http n/a n/a # parse: n/a # on absent: The draft defines no endpoint or registry entry, so there is nothing to probe. ``` # Knowledge Graph * **Lifecycle Step**: [2 Identify](/category/identify/index.md) * **Builds on**: [Workload Identity in Multi System Environments (WIMSE)](/okf/protocols/wimse.md), [SPIFFE (Secure Production Identity Framework for Everyone)](/okf/protocols/spiffe.md) * **Pairs with**: [Workload Identity in Multi System Environments (WIMSE)](/okf/protocols/wimse.md), [AI Identity Management System (AIMS)](/okf/protocols/wimse-aims.md), [SPIFFE (Secure Production Identity Framework for Everyone)](/okf/protocols/spiffe.md), [HTTP Message Signatures](/okf/protocols/http-message-signatures.md), [Identity Assertion JWT Authorization Grant (ID-JAG)](/okf/protocols/identity-assertion-authz-grant.md), [OAuth Protected Resource and Authorization Server Metadata (as used for agent authorization)](/okf/protocols/oauth-metadata-for-agents.md) * **Compared in**: [AI Agent Authentication and Authorization vs AI Identity Management System (AIMS)](/compare/aiagent-auth-vs-wimse-aims/index.md) [^ref-1]: IETF Datatracker, draft-klrc-aiagent-auth (status page): "Replaced Internet-Draft (wimse WG) Expired & archived" "Last updated 2026-09-09 (Latest revision 2026-07-06)" "Replaced by draft-ietf-wimse-aims" (https://datatracker.ietf.org/doc/draft-klrc-aiagent-auth/) [^ref-2]: IETF Datatracker, draft-ietf-wimse-aims (status page): "Active Internet-Draft (wimse WG)" "Replaces draft-klrc-aiagent-auth" "WG state WG Document" (https://datatracker.ietf.org/doc/draft-ietf-wimse-aims/) [^ref-3]: IETF Datatracker, draft-klrc-aiagent-auth history page: "2026-09-09 03 Justin Richer IETF WG state changed to Adopted by a WG" "2026-07-06 03 Pieter Kasselman New version available: draft-klrc-aiagent-auth-03.txt" "2026-06-01 02 Pieter Kasselman New version available: draft-klrc-aiagent-auth-02.txt" "2026-03-30 01 Pieter Kasselman New version available: draft-klrc-aiagent-auth-01.txt" "2026-03-02 00 Pieter Kasselman New version available: draft-klrc-aiagent-auth-00.txt" (https://datatracker.ietf.org/doc/draft-klrc-aiagent-auth/history/) [^ref-4]: P. Kasselman (Defakto Security), J. Lombardo (AWS), Y. Rosomakho (Zscaler) and B. Campbell (Ping Identity), AI Agent Authentication and Authorization, draft-klrc-aiagent-auth-00, 2 March 2026: "B. Campbell Ping Identity 2 March 2026" "This document proposes a model for authentication and authorization of AI agent interactions." (https://www.ietf.org/archive/id/draft-klrc-aiagent-auth-00.txt) [^ref-5]: P. Kasselman, J. Lombardo, Y. Rosomakho, B. Campbell, N. Steele (OpenAI) and A. Parecki (Okta), AI Agent Authentication and Authorization, draft-klrc-aiagent-auth-03, 6 July 2026: "Intended status: Informational" "N. Steele OpenAI A. Parecki Okta 6 July 2026" "This document proposes best practices for authentication and authorization of AI agent interactions." "Rather than defining new protocols, this document describes how existing and widely deployed standards can be applied or extended to establish agent authentication and authorization." "This document has no IANA actions." (https://www.ietf.org/archive/id/draft-klrc-aiagent-auth-03.txt) [^ref-6]: IETF, Minutes IETF126: wimse, 20 July 2026: "AI Agent Authentication and Authorization (10 min): Yaroslav Rosomakho" "Yaroslav asks to consider adoption in the WG." (https://datatracker.ietf.org/doc/minutes-126-wimse-202607201200/) [^ref-7]: J. Richer (WIMSE chair), wimse mailing list, call for adoption, 10 August 2026: "Mon, 10 August 2026 19:01 UTC" "the chairs would like to call for adoption of" "Please reply to the list by August 24, 2026." "As Pieter is co-author of this document, he has recused himself as chair of any process regarding this work should it continue in the working group, starting with this call for adoption." (https://mailarchive.ietf.org/arch/msg/wimse/I0RFmUD4Ry7ZrZ4QkFywer1SkGA/) [^ref-8]: J. Richer (WIMSE chair), wimse mailing list, adoption result, 9 September 2026: "Wed, 09 September 2026 16:56 UTC" "has been adopted as a working group item for WIMSE." "the text of this document is not sacred: it is a starting point for us to dig in and do the work to solve the problems." "Please publish a -00 version with the same content as the latest I-D." (https://mailarchive.ietf.org/arch/msg/wimse/ipoTMCLvV79Q3gJ1vP3lFtStDiI/) [^ref-9]: IETF Datatracker, draft-ietf-wimse-aims history page: "This document now replaces draft-klrc-aiagent-auth instead of None" "Justin Richer WG -00 approved" (https://datatracker.ietf.org/doc/draft-ietf-wimse-aims/history/) [^ref-10]: IETF Datatracker, Workload Identity in Multi System Environments (wimse) working group page: "Chairs Justin Richer, Pieter Kasselman" (https://datatracker.ietf.org/wg/wimse/about/)