---
title: "All KYA pages – overview by section"
url: https://knowyouragent.ch/en/overview
lang: en
updated: 2026-10-12
license: © Innopulse Consulting GmbH
---

# All pages

In short

All KYA pages at a glance, grouped by section, one line per page.

## What is KYA

- [Was this AI agent allowed to do that?](https://knowyouragent.ch/en)Was this AI agent allowed to do that? KYA verifies mandate, decision, receipt and timestamp independently and locally in your browser. Open, free, no account.
- [Verify evidence](https://knowyouragent.ch/en/verify)Paste a mandate, a decision, a receipt chain or an RFC 3161 timestamp. Ten checks, locally in your browser, with a reproducible report.
- [What is Know Your Agent?](https://knowyouragent.ch/en/what-is-kya)Know Your Agent checks whether an AI agent was authorized for a specific action: identity, principal, scope and proof. Definition, KYC comparison, building blocks.

## Method

- [The KYA method](https://knowyouragent.ch/en/method)How KYA verifies an AI agent's authority: four questions, four verification areas, ten deterministic checks, three verdicts and five levels.
- [Verification model](https://knowyouragent.ch/en/method/checks)The deterministic verification model of KYA: ten checks, six statuses, three verdicts, key provenance, time basis and all reason codes.
- [Assurance levels A0 to A4](https://knowyouragent.ch/en/method/levels)The five cumulative levels of the assurance scale: from unverified through integrity, authority and provenance to time-anchored evidence. With exact rules.
- [Error reference](https://knowyouragent.ch/en/method/errors)All 59 reason codes of the KYA engine with cause and fix, ordered by the ten checks. For developers and verifying parties.
- [Error reference: Format and schema](https://knowyouragent.ch/en/method/errors/format)Reason codes in the “Format and schema” check: 6 codes with cause and fix, including format_unknown and format_recognized_not_supported.
- [Error reference: Cryptographic integrity](https://knowyouragent.ch/en/method/errors/cryptographic-integrity)Reason codes in the “Cryptographic integrity” check: 13 codes with cause and fix, including signature_invalid and no_key.
- [Error reference: Issuer](https://knowyouragent.ch/en/method/errors/issuer)Reason codes in the “Issuer” check: 3 codes with cause and fix, including issuer_key_not_trusted and kid_issuer_mismatch.
- [Error reference: Agent and principal](https://knowyouragent.ch/en/method/errors/agent-and-principal)Reason codes in the “Agent and principal” check: 5 codes with cause and fix, including agent_mismatch and principal_missing.
- [Error reference: Mandate validity](https://knowyouragent.ch/en/method/errors/mandate-validity)Reason codes in the “Mandate validity” check: 3 codes with cause and fix, including expired and not_yet_valid.
- [Error reference: Scope of the action](https://knowyouragent.ch/en/method/errors/scope-of-the-action)Reason codes in the “Scope of the action” check: 7 codes with cause and fix, including action_not_in_scope and amount_exceeds_limit.
- [Error reference: Delegation chain](https://knowyouragent.ch/en/method/errors/delegation)Reason codes in the “Delegation chain” check: 4 codes with cause and fix, including no_delegation and delegation_broken.
- [Error reference: Revocation](https://knowyouragent.ch/en/method/errors/revocation)Reason codes in the “Revocation” check: 7 codes with cause and fix, including revoked and suspended.
- [Error reference: Execution receipt](https://knowyouragent.ch/en/method/errors/execution-receipt)Reason codes in the “Execution receipt” check: 4 codes with cause and fix, including receipt_decision_mismatch and receipt_mandate_mismatch.
- [Error reference: Timestamp](https://knowyouragent.ch/en/method/errors/timestamp)Reason codes in the “Timestamp” check: 6 codes with cause and fix, including tsa_malformed and tsa_imprint_mismatch.

## Standard

- [The open standard](https://knowyouragent.ch/en/standard)KYA's specification, engine and test vectors are open. What is licensed, how versions work and how to measure an implementation.
- [Know Your Agent approaches compared](https://knowyouragent.ch/en/standard/know-your-agent-approaches)A neutral comparison of Know Your Agent approaches from Skyfire, Akamai, Visa, Mastercard, Google and FIDO – and what KYA verifies. As of October 2026.
- [Releases](https://knowyouragent.ch/en/standard/releases)All KYA releases with dates: new formats, checks and tools. The policy version kya-policy/1.0 remains stable; the engine follows Semantic Versioning.
- [KYA verification profile 1.0](https://knowyouragent.ch/en/standard/verification-profile)The open KYA verification profile: how agent evidence is verified – claims profile, receipt chain kya-chain/1, evidence pack kya-pack/1, timestamps and report.
- [Conformance and test vectors](https://knowyouragent.ch/en/standard/test-vectors)62 public test vectors with real signatures, including Verifiable Intent and Web Bot Auth. How to check your implementation and get a format added.
- [Standards around agent authority](https://knowyouragent.ch/en/standard/landscape)How SD-JWT VC, status lists, RFC 3161, Web Bot Auth, AP2, Verifiable Intent and FIDO fit together – and where KYA comes in. As of October 2026.

## Tools

- [Tools](https://knowyouragent.ch/en/tools)Free tools for agent evidence: decode SD-JWT and JWS, build the RFC 9421 signature base, read status lists and timestamps, locally in the browser.
- [SD-JWT decoder](https://knowyouragent.ch/en/tools/sd-jwt-decoder)Decode SD-JWT and SD-JWT VC locally: header, claims, disclosures with digest matching and the key binding JWT, without the token leaving the browser.
- [JWS and JWT decoder](https://knowyouragent.ch/en/tools/jwt-decoder)Decode JWT and JWS locally: header, payload, times and signature length, without the token going to a server. For decisions, receipts and status lists.
- [RFC 9421 signature base](https://knowyouragent.ch/en/tools/rfc-9421-signature-base)Build the RFC 9421 signature base from a signed HTTP request and compare it with your own implementation, locally in the browser, with the IETF example.
- [Status list decoder](https://knowyouragent.ch/en/tools/status-list-decoder)Decode an IETF Token Status List locally: bits per entry, number of entries, revoked entries and the status at a given index.
- [Timestamp inspector (RFC 3161)](https://knowyouragent.ch/en/tools/timestamp-inspector)Read an RFC 3161 timestamp locally: time, hash algorithm, hash of the data, serial number, timestamp authority and embedded certificates.

## Enterprise

- [KYA for enterprises](https://knowyouragent.ch/en/enterprise)How enterprises use KYA: in the browser, in the CI pipeline or as a self-hosted copy in their own network. No data leaves, no license fees.
- [Trust and security](https://knowyouragent.ch/en/enterprise/trust)How KYA implements security and integrity: static architecture, strict security headers, release manifest with SHA-256, accessibility and vulnerability reporting.
- [For developers](https://knowyouragent.ch/en/enterprise/developers)Install the KYA engine as an npm package and use it in code and CI pipelines: API, options, verification report, JSON schemas, command line and versioning.
- [Financial services](https://knowyouragent.ch/en/enterprise/financial-services)How financial institutions verify whether an AI agent was authorized for a payment, order or claim: mandate, scope, revocation and receipt, recomputable.
- [Commerce and payments](https://knowyouragent.ch/en/enterprise/commerce)How merchants and payment providers verify whether an AI agent was allowed to buy on its customer's behalf: Verifiable Intent, Web Bot Auth, mandate and receipt.
- [Public sector](https://knowyouragent.ch/en/enterprise/public-sector)How public administration, courts and public enterprises prove on whose behalf an AI agent acted: mandate, delegation, receipt and an independent timestamp.
- [AI agents in insurance: claims, policies, evidence](https://knowyouragent.ch/en/enterprise/insurance)AI agents report claims, compare policies and conclude contracts on someone's behalf. What insurers and intermediaries must verify and how evidence helps.
- [AI agents in travel and mobility: booking with evidence](https://knowyouragent.ch/en/enterprise/travel-and-mobility)AI agents book trains, flights and hotels, rebook during disruptions and manage mobility passes. What providers must consider to admit agents safely.
- [AI agents in procurement: ordering within limits](https://knowyouragent.ch/en/enterprise/procurement)AI agents order supplies, negotiate terms and manage suppliers. How companies transfer authority rules, signing rights and evidence to agents.
- [AI agents in healthcare: administration with evidence](https://knowyouragent.ch/en/enterprise/healthcare)AI agents book doctor's appointments, submit invoices to health insurers and pass on requests. What practices and insurers verify and how data stays protected.
- [AI agents in real estate: renting, managing, evidence](https://knowyouragent.ch/en/enterprise/real-estate)AI agents apply for apartments, book viewings and commission tradespeople. What property managers verify and where tenancy law requires a signature.
- [AI agents in logistics: booking, customs, safeguards](https://knowyouragent.ch/en/enterprise/logistics)AI agents book freight capacity, track shipments and prepare customs declarations. Which actions need limits and how representation in customs is proven.
- [AI agents in telecommunications: contracts and SIM swaps](https://knowyouragent.ch/en/enterprise/telecommunications)AI agents switch plans, cancel contracts and request new SIM cards. Which actions telecom providers admit and why SIM swapping needs protection.

## Knowledge

- [Questions](https://knowyouragent.ch/en/knowledge/faq)Answers to common questions: what KYA checks, what happens to your data, what the levels mean and why a result is indeterminate.
- [KYA, KYC, KYB: why agents need a check of their own](https://knowyouragent.ch/en/knowledge/kya-vs-kyc)Know Your Customer checks people, Know Your Business checks companies. Why AI agents need a third check that takes place on every action.
- [Identity is not authority: what IAM leaves open for agents](https://knowyouragent.ch/en/knowledge/identity-is-not-authority)Authentication and access rights say who acts and what they may access. Why, for AI agents, that does not answer whether a specific action was allowed.
- [What an auditor needs from an agent action: 12 questions](https://knowyouragent.ch/en/knowledge/evidence-for-agent-actions)A checklist for audit, compliance and counterparties: the twelve questions evidence of an agent action must answer to be independently verifiable.
- [Timestamps for agent receipts: plain, anchored, qualified](https://knowyouragent.ch/en/knowledge/timestamps-and-trust-anchors)What an RFC 3161 timestamp proves, why the trust anchor decides and how qualified timestamps under ZertES and eIDAS differ.
- [Swiss e-ID and agent mandates: status October 2026](https://knowyouragent.ch/en/knowledge/e-id-and-agent-mandates)The launch of the Swiss e-ID has been postponed, the trust infrastructure is targeted for the first half of 2027. What this means for mandates to AI agents.
- [AI agent liability: who pays when an agent buys the wrong thing?](https://knowyouragent.ch/en/knowledge/ai-agent-liability)Who bears the consequences when an AI agent orders the wrong item or exceeds its limits? An overview of the legal position in Switzerland, Germany and Austria.
- [Proving authority: AI agents under Swiss, German and Austrian law](https://knowyouragent.ch/en/knowledge/proving-agent-authority)Why proof of authority is decisive for AI agents, what verifiable evidence must contain and how it works under Swiss, German and Austrian law.
- [Agentic commerce explained: how AI agents shop](https://knowyouragent.ch/en/knowledge/agentic-commerce)How AI agents search, compare and pay, which approaches payment networks offer for this, and what merchants should check before accepting an agent purchase.
- [Agent protocols compared: VI, AP2, TAP and Web Bot Auth](https://knowyouragent.ch/en/knowledge/agent-protocols-compared)Verifiable Intent, AP2, Trusted Agent Protocol, Web Bot Auth and Agentic Commerce Protocol compared: purpose, format, cryptography, openness, verifiability.
- [Securing AI agents in MCP: mandates instead of API keys](https://knowyouragent.ch/en/knowledge/securing-mcp-agents)How companies secure tool calls by AI agents through the Model Context Protocol: risks, authorization, decisions before execution and verifiable receipts.
- [Prompt injection and authority: verification outside the model](https://knowyouragent.ch/en/knowledge/prompt-injection-authority)Why prompt injection cannot be fully prevented in AI agents and why checking authority must happen outside the language model.
- [EU AI Act and AI agents: what applies to agents](https://knowyouragent.ch/en/knowledge/ai-act-ai-agents)What the European regulation on artificial intelligence means for AI agents: roles, transparency, record-keeping, deadlines and the situation in Switzerland.
- [Adopting AI agents safely: a checklist including data protection](https://knowyouragent.ch/en/knowledge/ai-agent-checklist)A practical checklist for companies adopting AI agents: authority, control, evidence, data protection under Swiss law and the GDPR, operations and contracts.
- [Know Your Agent in Switzerland: verifying AI agents](https://knowyouragent.ch/en/know-your-agent-switzerland)What Know Your Agent means for Swiss companies: agency under the Code of Obligations, data protection, the e-ID with swiyu and a neutral verifier based in Zug.
- [Know Your Agent in Germany: verifying AI agents](https://knowyouragent.ch/en/know-your-agent-germany)What Know Your Agent means for German companies: computer declarations and agency under the BGB, GDPR, the EUDI wallet, PSD2 and independent verification.
- [Know Your Agent in Austria: verifying AI agents](https://knowyouragent.ch/en/know-your-agent-austria)What Know Your Agent means for Austrian companies: authorization under the ABGB, GDPR, ID Austria, the EUDI wallet and independent verification.
- [Verify agent evidence in 5 steps](https://knowyouragent.ch/en/knowledge/guides/verify-evidence)Step by step: verify evidence from an AI agent with KYA, provide the verifying party's trust, read verdict and level, and keep the certificate.
- [Verify a signed HTTP request (RFC 9421, with IETF example)](https://knowyouragent.ch/en/knowledge/guides/verify-http-signature)Guide: verify a signed HTTP request following RFC 9421 with KYA, using the official IETF example from Appendix B.2.6, including a counter-check with a changed path.
- [Verify a timestamp (RFC 3161, with FreeTSA)](https://knowyouragent.ch/en/knowledge/guides/verify-timestamp)Guide: create a timestamp following RFC 3161 with OpenSSL and FreeTSA, cross-check it locally and verify it in KYA with the timestamp anchor.
- [Questions on law and liability for AI agents](https://knowyouragent.ch/en/knowledge/faq/legal)Answers to common legal questions about AI agents: liability, contract formation, authority, proof, data protection and regulation in CH, DE and AT.
- [Questions on technology and formats in KYA](https://knowyouragent.ch/en/knowledge/faq/technical)Answers to technical questions about KYA: formats, local verification, verdicts and levels, keys, revocation, timestamps, package and test vectors.
- [State of the standards for AI agents](https://knowyouragent.ch/en/standard/status)Where the approaches for AI agents stand today, from Verifiable Intent and AP2 to Web Bot Auth, e-ID and the EUDI wallet, with chronology and KYA support.
- [Agent mandate or OAuth token? The difference](https://knowyouragent.ch/en/knowledge/comparison/mandate-or-oauth)OAuth governs an agent's access to an interface, an agent mandate the individual action on someone's behalf. Differences, use and interplay at a glance.
- [Agent mandate or API key? Which is safer](https://knowyouragent.ch/en/knowledge/comparison/mandate-or-api-key)Many AI agents work with API keys. Why a key acts like blanket authority and what an agent mandate with limits, revocation and evidence does differently.
- [SD-JWT VC or W3C Verifiable Credentials? Compared](https://knowyouragent.ch/en/knowledge/comparison/sd-jwt-vc-or-w3c-vc)Two formats for digital credentials: the IETF's SD-JWT VC and the W3C Verifiable Credentials 2.0 data model. Structure, disclosure, adoption and fit for mandates.
- [Web Bot Auth or bot detection? Recognizing agents](https://knowyouragent.ch/en/knowledge/comparison/web-bot-auth-or-bot-detection)Bot detection estimates from behavior, Web Bot Auth proves the origin of a request with a signature. What each achieves and why shops need both.
- [RFC 3161 timestamp or blockchain anchoring?](https://knowyouragent.ch/en/knowledge/comparison/timestamp-or-blockchain)Two ways to prove a point in time for agent evidence independently: a timestamp from a timestamp authority following RFC 3161 or anchoring in a public blockchain.
- [AI agent pays invoices: automating safely](https://knowyouragent.ch/en/knowledge/use-cases/ai-agent-pays-invoices)An AI agent checks and pays supplier invoices. How companies secure this with a mandate, a decision before payment, approval thresholds and verifiable receipts.
- [AI agent books business travel: limits and evidence](https://knowyouragent.ch/en/knowledge/use-cases/ai-agent-books-business-travel)An AI agent books train, flight and hotel according to the travel policy. How mandate, delegation, decisions and receipts make bookings traceable.
- [AI agent manages subscriptions: renewing and canceling](https://knowyouragent.ch/en/knowledge/use-cases/ai-agent-manages-subscriptions)An AI agent renews, switches and cancels subscriptions on a customer's behalf. Which limits should apply and how providers can verify actions by agents.
- [AI agent in customer service: securing refunds](https://knowyouragent.ch/en/knowledge/use-cases/ai-agent-in-customer-service)An AI agent handles complaints and books credits or refunds. How limits, decisions and receipts prevent abuse and mistakes in customer service.
- [Use the engine in Node.js: verify evidence in the backend](https://knowyouragent.ch/en/knowledge/guides/use-the-engine-in-node)Integrate the KYA engine in Node.js or TypeScript: install, provide trust, call verify(), evaluate verdict and checks. With working code.
- [Verify evidence in the CI pipeline with kya-verify](https://knowyouragent.ch/en/knowledge/guides/verify-evidence-in-ci)Verify agent evidence automatically in GitHub Actions or any other CI pipeline: the kya-verify command line, exit codes, trust in the repository, report as JSON.
- [Publish keys as JWKS: a guide for issuers](https://knowyouragent.ch/en/knowledge/guides/publish-keys-as-jwks)As an issuer of agent evidence, create a key pair, publish the public key as JWKS and rotate keys without invalidating older evidence.
- [Publish and maintain a status list: revocation for mandates](https://knowyouragent.ch/en/knowledge/guides/publish-a-status-list)Create, compress, sign and publish a status list following the IETF Token Status List so mandates can be revoked before they expire. With working code.
- [Questions from merchants about AI agents: 13 answers](https://knowyouragent.ch/en/knowledge/faq/merchants)What online shops and merchants need to know about shopping AI agents: recognizing, admitting, checking orders, payments, returns, liability and first steps.
- [Questions from developers about KYA: 13 answers](https://knowyouragent.ch/en/knowledge/faq/developers)Answers for developers: integrating the engine, formats, keys, status lists, exit codes, test vectors, determinism, license and performance.
- [Guardrails or authorization? What secures AI agents](https://knowyouragent.ch/en/knowledge/comparison/guardrails-or-authorization)Guardrails filter what a model says; authorization decides what an agent may do. Why actions with consequences need a deterministic check.
- [MCP or A2A? Two protocols for AI agents compared](https://knowyouragent.ch/en/knowledge/comparison/mcp-or-a2a)MCP connects agents with tools, A2A connects agents with each other. Purpose, structure, security and how both protocols work together in one architecture.
- [Decision before or log after? Controlling agents](https://knowyouragent.ch/en/knowledge/comparison/decision-before-or-log-after)Many companies log what their AI agents do. Why a log prevents no damage and what a signed decision before execution changes.
- [Human approval or a mandate with limits?](https://knowyouragent.ch/en/knowledge/comparison/approval-or-mandate)Should a person approve every action of an AI agent, or should a mandate set the limits? Strengths, weaknesses and the combination that works in practice.
- [Trusted Agent Protocol or Web Bot Auth? Compared](https://knowyouragent.ch/en/knowledge/comparison/trusted-agent-protocol-or-web-bot-auth)Visa's Trusted Agent Protocol and Web Bot Auth sign agent requests following RFC 9421. What they share, how they differ and what merchants take from it.
- [Agent mandate or written authorization on paper?](https://knowyouragent.ch/en/knowledge/comparison/mandate-or-written-authorization)A written authorization on paper is made for people, an agent mandate for software. What both achieve, where the law requires form and how companies combine them.
- [AI agent shops online: purchase intent, limits, evidence](https://knowyouragent.ch/en/knowledge/use-cases/ai-agent-shops-online)An AI agent shops online on a customer's behalf. How purchase intent, limits and evidence make the purchase safe and traceable for customer and merchant.
- [AI agent files applications with authorities: proving representation](https://knowyouragent.ch/en/knowledge/use-cases/ai-agent-files-applications)An AI agent fills in forms and files applications and notifications with authorities. How representation, identity and evidence work together in e-government.
- [AI agent books appointments: limits, cancellations, privacy](https://knowyouragent.ch/en/knowledge/use-cases/ai-agent-books-appointments)An AI agent arranges, reschedules and cancels appointments with practices, tradespeople and service providers. Which limits apply and how providers verify bookings.
- [AI agent creates sales offers: binding within limits](https://knowyouragent.ch/en/knowledge/use-cases/ai-agent-creates-sales-offers)An AI agent creates and sends offers on a company's behalf. Why binding offers need clear limits and how customers verify the agent's authority.
- [AI agent manages cloud resources: limits in operations](https://knowyouragent.ch/en/knowledge/use-cases/ai-agent-manages-cloud-resources)An AI agent scales servers, adjusts configurations and cuts cloud costs. How mandate, approvals and receipts prevent outages and expensive mistakes.
- [AI agent runs code deployments: safely into production](https://knowyouragent.ch/en/knowledge/use-cases/ai-agent-runs-code-deployments)Coding agents write code, open pull requests and deploy. How mandate, protected branches, approvals and receipts secure deliveries by agents.
- [Knowledge](https://knowyouragent.ch/en/knowledge)Articles, glossary and questions on KYA, identity and authority, evidence for auditors, timestamps and the Swiss e-ID – with sources.
- [Glossary](https://knowyouragent.ch/en/knowledge/glossary)Definitions of agent mandate, decision token, receipt chain, status list, key binding, trust anchor and further terms around Know Your Agent.

## About

- [About KYA](https://knowyouragent.ch/en/about)Who operates KYA, which principles apply, how the relationship with the reference implementation Mandact is governed and how to use the brand.
- [Contact](https://knowyouragent.ch/en/about/contact)Questions, new formats, security reports or press: how to reach the team behind KYA. Your message goes directly from your own email app to us.
- [Legal notice](https://knowyouragent.ch/en/legal-notice)Legal notice of knowyouragent.ch: Innopulse Consulting GmbH, Gotthardstrasse 30, 6300 Zug, UID CHE-219.727.921. Contact: info@innopulse.io.
- [Privacy policy](https://knowyouragent.ch/en/privacy)Privacy policy of knowyouragent.ch: verification locally in the browser, no cookies, no tracking, contact through your own email app. Your rights under Swiss law.
- [Leutrim Miftaraj](https://knowyouragent.ch/en/about/leutrim-miftaraj)Leutrim Miftaraj is the founder and managing director of Innopulse Consulting GmbH in Zug, Switzerland, and designed KYA's method, specification and engine.
- [Reference implementation: Mandact](https://knowyouragent.ch/en/about/reference-implementation)Mandact issues agent mandates, decides before every execution and produces chained receipts. Its role as reference implementation and how separation works.

## Glossary

[Know Your Agent (KYA)](https://knowyouragent.ch/en/knowledge/glossary/know-your-agent) · [Agent mandate](https://knowyouragent.ch/en/knowledge/glossary/agent-mandate) · [Principal](https://knowyouragent.ch/en/knowledge/glossary/principal) · [Agent passport](https://knowyouragent.ch/en/knowledge/glossary/agent-passport) · [Decision token](https://knowyouragent.ch/en/knowledge/glossary/decision-token) · [Execution receipt](https://knowyouragent.ch/en/knowledge/glossary/execution-receipt) · [Receipt chain](https://knowyouragent.ch/en/knowledge/glossary/receipt-chain) · [Evidence pack](https://knowyouragent.ch/en/knowledge/glossary/evidence-pack) · [Verifying party](https://knowyouragent.ch/en/knowledge/glossary/verifying-party) · [Verifier](https://knowyouragent.ch/en/knowledge/glossary/verifier) · [Fail-closed](https://knowyouragent.ch/en/knowledge/glossary/fail-closed) · [SD-JWT VC](https://knowyouragent.ch/en/knowledge/glossary/sd-jwt-vc) · [Key binding](https://knowyouragent.ch/en/knowledge/glossary/key-binding) · [Status list](https://knowyouragent.ch/en/knowledge/glossary/status-list) · [Timestamp (RFC 3161)](https://knowyouragent.ch/en/knowledge/glossary/rfc-3161-timestamp) · [Trust anchor](https://knowyouragent.ch/en/knowledge/glossary/trust-anchor) · [Delegation chain](https://knowyouragent.ch/en/knowledge/glossary/delegation-chain) · [Blanket authority](https://knowyouragent.ch/en/knowledge/glossary/blanket-authority) · [AI agent](https://knowyouragent.ch/en/knowledge/glossary/ai-agent) · [Agentic commerce](https://knowyouragent.ch/en/knowledge/glossary/agentic-commerce) · [Authority to act](https://knowyouragent.ch/en/knowledge/glossary/authority-to-act) · [Verifiable Intent](https://knowyouragent.ch/en/knowledge/glossary/verifiable-intent) · [Agent Payments Protocol (AP2)](https://knowyouragent.ch/en/knowledge/glossary/ap2) · [Web Bot Auth](https://knowyouragent.ch/en/knowledge/glossary/web-bot-auth) · [HTTP Message Signatures (RFC 9421)](https://knowyouragent.ch/en/knowledge/glossary/http-message-signatures) · [Trusted Agent Protocol](https://knowyouragent.ch/en/knowledge/glossary/trusted-agent-protocol) · [Selective disclosure](https://knowyouragent.ch/en/knowledge/glossary/selective-disclosure) · [Decentralized Identifier (DID)](https://knowyouragent.ch/en/knowledge/glossary/did) · [OpenID for Verifiable Presentations (OID4VP)](https://knowyouragent.ch/en/knowledge/glossary/oid4vp) · [Qualified timestamp](https://knowyouragent.ch/en/knowledge/glossary/qualified-timestamp) · [Prompt injection](https://knowyouragent.ch/en/knowledge/glossary/prompt-injection) · [Least privilege](https://knowyouragent.ch/en/knowledge/glossary/least-privilege) · [Model Context Protocol (MCP)](https://knowyouragent.ch/en/knowledge/glossary/mcp) · [Swiss e-ID (swiyu)](https://knowyouragent.ch/en/knowledge/glossary/swiss-e-id) · [Rich Authorization Requests (RFC 9396)](https://knowyouragent.ch/en/knowledge/glossary/rich-authorization-requests) · [OAuth Token Exchange (RFC 8693)](https://knowyouragent.ch/en/knowledge/glossary/token-exchange) · [DPoP (RFC 9449)](https://knowyouragent.ch/en/knowledge/glossary/dpop) · [OAuth 2.1](https://knowyouragent.ch/en/knowledge/glossary/oauth-2-1) · [Mutual TLS (RFC 8705)](https://knowyouragent.ch/en/knowledge/glossary/mutual-tls) · [Agent2Agent protocol (A2A)](https://knowyouragent.ch/en/knowledge/glossary/a2a) · [Agent Card](https://knowyouragent.ch/en/knowledge/glossary/agent-card) · [Agentic Commerce Protocol (ACP)](https://knowyouragent.ch/en/knowledge/glossary/agentic-commerce-protocol) · [Confused deputy](https://knowyouragent.ch/en/knowledge/glossary/confused-deputy) · [Replay attack](https://knowyouragent.ch/en/knowledge/glossary/replay-attack) · [EUDI wallet](https://knowyouragent.ch/en/knowledge/glossary/eudi-wallet) · [eIDAS 2.0](https://knowyouragent.ch/en/knowledge/glossary/eidas-2) · [ID Austria](https://knowyouragent.ch/en/knowledge/glossary/id-austria) · [Qualified electronic signature](https://knowyouragent.ch/en/knowledge/glossary/qualified-electronic-signature) · [W3C Verifiable Credentials 2.0](https://knowyouragent.ch/en/knowledge/glossary/w3c-verifiable-credentials) · [Strong customer authentication](https://knowyouragent.ch/en/knowledge/glossary/strong-customer-authentication) · [Network tokenization](https://knowyouragent.ch/en/knowledge/glossary/network-tokenization) · [Human in the loop](https://knowyouragent.ch/en/knowledge/glossary/human-in-the-loop) · [Policy decision point (PDP)](https://knowyouragent.ch/en/knowledge/glossary/policy-decision-point) · [Zero trust](https://knowyouragent.ch/en/knowledge/glossary/zero-trust) · [JWKS (JSON Web Key Set)](https://knowyouragent.ch/en/knowledge/glossary/jwks) · [X.509 certificate](https://knowyouragent.ch/en/knowledge/glossary/x509-certificate) · [Canonicalization (JCS)](https://knowyouragent.ch/en/knowledge/glossary/canonicalization) · [Workload identity (SPIFFE)](https://knowyouragent.ch/en/knowledge/glossary/workload-identity) · [Passkeys](https://knowyouragent.ch/en/knowledge/glossary/passkeys) · [Know Your Business (KYB)](https://knowyouragent.ch/en/knowledge/glossary/know-your-business) · [Tool poisoning](https://knowyouragent.ch/en/knowledge/glossary/tool-poisoning) · [Guardrails](https://knowyouragent.ch/en/knowledge/glossary/guardrails) · [Payment initiation service](https://knowyouragent.ch/en/knowledge/glossary/payment-initiation-service) · [Electronic seal](https://knowyouragent.ch/en/knowledge/glossary/electronic-seal) · [OpenID Federation](https://knowyouragent.ch/en/knowledge/glossary/openid-federation)

---
Quelle: https://knowyouragent.ch/en/overview · KYA – Know Your Agent