{
 "id": "idmandat-credential",
 "name": "ID MANDAT: A Machine-Readable Credential for the Agents of a Company",
 "acronym": "ID MANDAT",
 "aliases": [
  "idmandat",
  "draft-koenig-idmandat-credential"
 ],
 "collisions": [],
 "step": "identify",
 "parties": [
  "agent-site",
  "agent-registry"
 ],
 "form": "well-known-file",
 "track": "ietf",
 "scope": "general",
 "question": "How can a recipient find out which company stands behind an agent and what that agent is declared to be allowed and not allowed to do on the company's behalf?",
 "analog": "An imprint page for agents, with a DNS TXT proof record and a signed registry lookup",
 "origin": {
  "org": "M. König (individual submission; registry operated at idmandat.com)",
  "date": "2026-10-16"
 },
 "governance": "Individual Internet-Draft, not an IETF working group product; the reference registry is operated at idmandat.com",
 "native_status": "Internet-Draft, Intended Status: Informational; individual submission describing a deployed beta (version 0.3), not the product of an IETF working group",
 "phase": "draft",
 "implementation": "prototype",
 "adoption": {
  "level": "unmeasured",
  "by": null,
  "probe_run": null
 },
 "version": {
  "label": "draft-koenig-idmandat-credential-00",
  "date": "2026-10-16"
 },
 "spec_url": "https://datatracker.ietf.org/doc/html/draft-koenig-idmandat-credential-00",
 "discovery": {
  "mechanism": "well-known file at /.well-known/idmandat.json, linked to the domain by a DNS TXT record at _idmandat.<domain>",
  "path": "/.well-known/idmandat.json"
 },
 "probe": {
  "method": "GET",
  "path": "/.well-known/idmandat.json",
  "parse": "Parse JSON; check that 'domain' equals the fetched host and that 'agents' is present; optionally resolve the TXT record _idmandat.<domain> for 'v=idmandat1'",
  "on_absent": "Treat as no declaration; absence is not evidence against the agent"
 },
 "evidence": [
  {
   "claim": "Internet-Draft defining a credential file at /.well-known/idmandat.json, a DNS TXT proof record at _idmandat, and a signed Ed25519 registry lookup answer format; described as a deployed beta (version 0.3).",
   "label": "REPORTED",
   "url": "https://datatracker.ietf.org/doc/html/draft-koenig-idmandat-credential-00",
   "date": "2026-10-16"
  }
 ],
 "summary_md": "Describes a JSON credential file a company publishes at /.well-known/idmandat.json, naming the company and its agents with per-agent 'may' and 'mayNot' mandates. A DNS TXT record at _idmandat.<domain> ties the file to the domain. A public registry checks both and returns Ed25519-signed answers with check levels and revocation states. The agent details are operator declarations and not verified by the registry. It complements Web Bot Auth, which proves key possession but not who operates the agent.",
 "part_of": null,
 "group": null,
 "candidate": true,
 "confidence": 0.6,
 "use_cases": [
  "prove-agent-identity",
  "describe-agent-capabilities",
  "delegate-user-authority",
  "attribute-agent-traffic"
 ],
 "audience": [
  "site-owner",
  "agent-builder",
  "platform"
 ],
 "pairs_with": [
  "webbotauth",
  "http-message-signatures",
  "a2a",
  "mcp"
 ],
 "prerequisites": [
  "webbotauth"
 ],
 "dispute": null,
 "last_verified": "2026-10-19",
 "history": [
  {
   "date": "2026-10-19",
   "note": "auto-drafted candidate from exa (https://datatracker.ietf.org/doc/html/draft-koenig-idmandat-credential-00)"
  }
 ],
 "watch": [
  {
   "type": "page",
   "url": "https://datatracker.ietf.org/doc/html/draft-koenig-idmandat-credential-00"
  }
 ],
 "freshness": "current",
 "url": "https://agenticweb.wiki/protocols/idmandat-credential/",
 "category": "identify",
 "type": "protocol"
}