I-D Action: draft-sharif-attp-agent-trust-transport-01.txt

Internet-Draft draft-sharif-attp-agent-trust-transport-01.txt is now
available.

   Title:   ATTP: Agent Trust Transport Protocol for Secure Agent-to-Server Communication
   Author:  Raza Sharif
   Name:    draft-sharif-attp-agent-trust-transport-01.txt
   Pages:   30
   Dates:   2026-08-27

Abstract:

   This document specifies ATTP (Agent Trust Transport Protocol),
   a synchronous request-response protocol for communication
   between autonomous AI agents and web API servers.  ATTP
   operates as an application-layer protocol over HTTP, adding
   mandatory cryptographic identity verification, per-message
   signing, trust-gated access control, and tamper-evident audit
   trail generation to every agent-server interaction.

   ATTP defines five protocol-layer headers for requests
   (X-Agent-Trust, X-Agent-Signature, X-Agent-Nonce,
   X-Agent-Timestamp, X-ATTP-Version) and three for responses
   (X-Server-Signature, X-Server-Nonce, X-Server-Timestamp)
   that carry an Agent Passport (JWT-based identity credential),
   ECDSA P-256 digital signatures, cryptographic nonces, and
   timestamps.  Server middleware verifies all cryptographic
   properties before application code executes.

   ATTP has no insecure mode.  Every request MUST carry a valid
   Agent Passport.  Every request body MUST be signed.  Every
   response body MUST be signed.  Every interaction MUST be
   recorded in a hash-chained audit trail.  The protocol defines
   a URL scheme (attp://) and is fully backward-compatible with
   existing HTTP infrastructure.

   ATTP is the synchronous counterpart to the Agent Transport
   Protocol (ATP).  ATP handles asynchronous store-and-forward
   agent delivery; ATTP handles real-time request-response API
   communication.  Both share the same identity model, trust
   framework, and cryptographic primitives.

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-sharif-attp-agent-trust-transport/

There is also an HTMLized version available at:
https://datatracker.ietf.org/doc/html/draft-sharif-attp-agent-trust-transport-01

A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-sharif-attp-agent-trust-transport-01

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts


_______________________________________________
I-D-Announce mailing list -- [email protected]
To unsubscribe send an email to [email protected]