{
 "id": "credential-delegation-protocol-wimse",
 "name": "Credential Delegation Protocol for AI Agents in Multi-System Environments",
 "acronym": "",
 "aliases": [
  "draft-sweeney-wimse-credential-delegation",
  "Cred Credential Delegation Protocol"
 ],
 "collisions": [],
 "step": "permit",
 "parties": [
  "agent-human",
  "agent-site"
 ],
 "form": "endpoint",
 "track": "ietf",
 "scope": "general",
 "question": "How can a human user delegate scoped, attenuated, revocable credentials to AI agents across multiple service providers without exposing the underlying OAuth tokens to the agents?",
 "analog": "OAuth 2.0 Token Exchange profile for agent delegation",
 "origin": {
  "org": "K. Sweeney (individual IETF submission, WIMSE)",
  "date": "2026-10-13"
 },
 "governance": "Individual Internet-Draft submitted to the IETF WIMSE Working Group mailing list; source on GitHub (cred-ninja/protocol)",
 "native_status": "Internet-Draft, Intended Status: Standards Track; expires 16 April 2027",
 "phase": "draft",
 "implementation": "prototype",
 "adoption": {
  "level": "unmeasured",
  "by": null,
  "probe_run": null
 },
 "version": {
  "label": "draft-sweeney-wimse-credential-delegation-01",
  "date": "2026-10-13"
 },
 "spec_url": "https://datatracker.ietf.org/doc/html/draft-sweeney-wimse-credential-delegation-01",
 "discovery": {
  "mechanism": "Delegation Server endpoints within a trust domain; no standard discovery path described in the available text",
  "path": null
 },
 "probe": {
  "method": "NONE",
  "path": "",
  "parse": "",
  "on_absent": "No externally observable site-level signal described; treat support as unknown"
 },
 "evidence": [
  {
   "claim": "Internet-Draft draft-sweeney-wimse-credential-delegation-01, published 13 October 2026, Intended Status Standards Track, workgroup WIMSE; profiles RFC 8693, RFC 9449, RFC 9396 and OpenID CIBA for credential delegation to AI agents.",
   "label": "REPORTED",
   "url": "https://datatracker.ietf.org/doc/html/draft-sweeney-wimse-credential-delegation-01",
   "date": "2026-10-13"
  },
  {
   "claim": "Source for the draft and issue tracker are hosted on GitHub; the reference implementation is reported to pass twenty Asor interop vectors.",
   "label": "REPORTED",
   "url": "https://github.com/cred-ninja/protocol",
   "date": null
  }
 ],
 "summary_md": "An individual Internet-Draft in the IETF WIMSE space that profiles OAuth 2.0 Token Exchange (RFC 8693), DPoP (RFC 9449), Rich Authorization Requests (RFC 9396) and CIBA for delegating scoped credentials to AI agents. It defines ephemeral-key agent identities, capability-shaped delegation tokens, credential wrapping, consent-gated delegation, cascading revocation and audit chains. It defines no new token formats or grant types and is positioned as a companion to draft-ietf-wimse-aims.",
 "part_of": null,
 "group": null,
 "candidate": true,
 "confidence": 0.8,
 "use_cases": [
  "delegate-user-authority",
  "prove-agent-identity",
  "audit-agent-actions"
 ],
 "audience": [
  "agent-builder",
  "platform",
  "standards-body"
 ],
 "pairs_with": [
  "wimse-aims",
  "http-message-signatures",
  "aip-delegation-chain"
 ],
 "prerequisites": [],
 "dispute": null,
 "last_verified": "2026-10-18",
 "history": [
  {
   "date": "2026-10-16",
   "note": "auto-drafted candidate from exa (https://datatracker.ietf.org/doc/html/draft-sweeney-wimse-credential-delegation-01)"
  }
 ],
 "watch": [
  {
   "type": "page",
   "url": "https://datatracker.ietf.org/doc/html/draft-sweeney-wimse-credential-delegation-01"
  }
 ],
 "freshness": "current",
 "url": "https://agenticweb.wiki/protocols/credential-delegation-protocol-wimse/",
 "category": "permit",
 "type": "protocol"
}