--- title: "KYA – Know Your Agent: verify AI agent authority" url: https://knowyouragent.ch/en lang: en updated: 2026-10-12 license: © Innopulse Consulting GmbH --- Know Your Agent (KYA) # Was this AI agent allowed to do that? The neutral Know Your Agent verifier: KYA checks an AI agent's authority, decision and receipt – across vendors, locally in your browser and in a way anyone can recompute. [Verify evidence](https://knowyouragent.ch/en/verify)[See an example](https://knowyouragent.ch/en/verify?beispiel=paket) - Free, no account - Nothing leaves the browser - Verifies Verifiable Intent and Web Bot Auth ## Access is not permission An agent can be correctly signed in, have access to the payment interface – and still perform an action nobody allowed. Who is this? ### Identity Sign-in, workload identity, DID. Says who is acting. What may it access? ### Access Roles and scopes. Say which interfaces are open. Was it allowed to do exactly this? ### Authority Mandate, decision, receipt. KYA verifies whether this one action was covered – and proves it. ## How KYA verifies Four verification areas, ten fixed checks. No check counts as passed just because it was not performed. - ### Authenticity Is the evidence unchanged and from the stated issuer? - Format and schema - Cryptographic integrity - Issuer - ### Identity and principal Who acts, for whom and through which chain? - Agent and principal - Delegation chain - ### Authority Was the action covered and the mandate in force? - Mandate validity - Scope of the action - Revocation - ### Proof Is the execution recorded and fixed in time? - Execution receipt - Timestamp [The method in detail](https://knowyouragent.ch/en/method) ## Five levels, one seal Every result receives a seal from A0 to A4. The levels build on each other; disproven evidence always sits at A0. - A0 KYA-A0**Unverified**Format recognized, nothing proven - A1 KYA-A1**Integrity Verified**Signatures and hashes match - A2 KYA-A2**Authority Verified**Mandate valid, action in scope - A3 KYA-A3**Provenance Verified**Not revoked, delegation unbroken - A4 KYA-A4**Time-Anchored Evidence**Point in time independently fixed [How the levels are defined](https://knowyouragent.ch/en/method/levels) ## Who KYA is built for ### Operators of their own agents They are principal and verifying party at once and want to be able to prove every action of their agents – to customers, auditors and courts. ### Audit and assurance They need receipts they can recompute without access to the operator's systems. The certificate is reproducible. ### Counterparties Merchants and platforms decide whether to accept a third-party agent's action. KYA shows what is proven and what is not. [Use KYA in your organization](https://knowyouragent.ch/en/enterprise) ## Open, local, reproducible The engine is open source and runs identically in the browser, on the command line and in CI. Same input, same certificate. **Checks** 10, deterministic **Test vectors** 62, real signatures **Network requests while verifying** none **Cookies and tracking** none **Specification** CC BY 4.0 **Engine** Apache 2.0 [To the open standard](https://knowyouragent.ch/en/standard) ## Knowledge Background on authority, receipts and verification of AI agents. - 12 October 2026[KYA, KYC, KYB: why agents need a check of their own](https://knowyouragent.ch/en/knowledge/kya-vs-kyc)Know Your Customer checks people, Know Your Business checks companies. Why AI agents need a third check that takes place on every action. - 12 October 2026[Identity is not authority: what IAM leaves open for agents](https://knowyouragent.ch/en/knowledge/identity-is-not-authority)Authentication and access rights say who acts and what they may access. Why, for AI agents, that does not answer whether a specific action was allowed. - 12 October 2026[What an auditor needs from an agent action: 12 questions](https://knowyouragent.ch/en/knowledge/evidence-for-agent-actions)A checklist for audit, compliance and counterparties: the twelve questions evidence of an agent action must answer to be independently verifiable. [All articles and the glossary](https://knowyouragent.ch/en/knowledge) ## Built in Zug Leutrim Miftaraj, Founder and Managing Director of Innopulse Consulting GmbH KYA is built by Innopulse Consulting GmbH in Zug, Switzerland. Founder Leutrim Miftaraj has led IT projects for Swiss institutions for more than ten years and designed the method, specification and engine. If you operate your own agents and want to prove their actions this way, [Mandact](https://mandact.com/en/protocol?utm_source=knowyouragent.ch&utm_medium=referral&utm_campaign=home-reference) is the commercial reference implementation. The verifier here works without it. [View profile](https://knowyouragent.ch/en/about/leutrim-miftaraj)[About Innopulse Consulting GmbH](https://knowyouragent.ch/en/about)[How the separation works](https://knowyouragent.ch/en/about/reference-implementation) ## Frequently asked questions ### What is Know Your Agent? Know Your Agent (KYA) is verifying whether an AI agent was authorized for a specific action, with evidence that third parties can recompute independently. ### What does knowyouragent.ch verify? Who the agent is, on whose behalf it acts, whether its mandate was valid and not revoked, whether the action stayed within the permitted scope and whether execution is proven. ### Is my data transmitted? No. Verification runs entirely in the browser, without an account and without tracking. ### Which formats are supported? Among others SD-JWT VC, JWS, evidence packs, receipt chains, timestamps following RFC 3161, Mastercard Verifiable Intent and signed HTTP requests following RFC 9421. ### What does verification cost? Nothing. Verification is free; the engine is also available as a package under Apache 2.0. --- Quelle: https://knowyouragent.ch/en · KYA – Know Your Agent