draft-sharif-openid-agent-identity

OpenID Connect Agent Identity Claims for Autonomous AI Agents

groupnone stateactive pages2 rev00 expires2026-09-27 canonicalhttps://datatracker.ietf.org/doc/draft-sharif-openid-agent-identity/
This specification defines a profile of OpenID Connect Core 1.0 that enables Identity Providers (IdPs) to issue identity tokens for autonomous software agents. It introduces a set of standard claims for representing agent identity, ownership, trust posture, authorised capabilities, and compliance screening status within OpenID Connect ID Tokens. The profile is designed to operate within existing OpenID Connect infrastructure without requiring modifications to the core protocol. It defines how Relying Parties (RPs) validate agent tokens and enforce graduated access controls based on agent trust levels and sanctions screening results.