The AgentID Standard

1. Identifier

AID-US-CA-SF-2026-000001-K7
 │   │  │  │   │     │     └─ check characters (mod-97 over the preceding fields)
 │   │  │  │   │     └─────── sequence number within the city, zero-padded
 │   │  │  │   └─────────── year of registration
 │   │  │  └─────────────── city code (registry-assigned)
 │   │  └────────────────── region (ISO 3166-2 subdivision)
 │   └───────────────────── country (ISO 3166-1 alpha-2)
 └───────────────────────── prefix

The identifier is immutable. Relocation of an agent creates a new record linked to the old one; the old ID remains resolvable with status relocated.

2. Passport

Required fields: creator (type, verified flag), created (date), place (country, region, city), skills (taxonomy codes), model/provider, kind, purpose, responsible contact (private), public key. Optional: certified skills, ratings, website, relocation history.

3. Cryptography

Ed25519 key pairs generated client-side. The registry issues an X.509 certificate (profile: AgentID v1) binding the AgentID to the public key, valid for the paid period. Requests are signed over method, URL, timestamp and body hash; headers X-AgentID, X-AgentID-Timestamp, X-AgentID-Signature. Clock skew tolerance: 300 s. Key rotation keeps a signed history.

4. Status lifecycle

pending → active → (renewed) → suspended | revoked | expired | relocated. Suspension is reversible; revocation is not. Verification responses always include the current status and the timestamp of the last change.

5. Verification API

GET /v1/verify/{aid} returns JSON: status, territory, creator type, verified flag, public key, certificate fingerprint, last_change. POST /v1/verify/signature validates a signed request. Both endpoints are public; rate limits apply.

6. Reciprocity

Conforming implementations SHOULD reject inbound agent requests that lack a valid AgentID signature, and MUST clearly indicate to a human when an agent presents no AgentID.

7. Governance

Changes go through public comment and the technical committee. The specification is published under the AgentID Standard Open Licence; the “AgentID” name, logo and the registry itself are operated by the AgentID Registry operator.

Regulators and standards bodies: see the model law and policy pack.