# aport-spec: The Open Agent Passport (OAP) Specification for AI Agent Trust This repository profile is provided by osrepos.com, an open source repository discovery platform. Source: osrepos.com Repository profile: https://osrepos.com/repo/aporthq-aport-spec Generated for open source discovery and AI-assisted research. The aport-spec repository introduces the Open Agent Passport (OAP) specification, a critical framework for establishing trust in AI agents. It defines a lightweight, cryptographically verifiable credential, enabling real-time, pre-action authorization for AI agents across various platforms. OAP provides the essential runtime trust layer for secure and scalable agentic commerce. GitHub: https://github.com/aporthq/aport-spec OSRepos URL: https://osrepos.com/repo/aporthq-aport-spec ## Summary The aport-spec repository introduces the Open Agent Passport (OAP) specification, a critical framework for establishing trust in AI agents. It defines a lightweight, cryptographically verifiable credential, enabling real-time, pre-action authorization for AI agents across various platforms. OAP provides the essential runtime trust layer for secure and scalable agentic commerce. ## Topics - ai - aiagent - authorization - security - TypeScript - specification - agent passport - verifiable credentials ## Repository Information Last analyzed by OSRepos: Fri Sep 18 2026 20:38:56 GMT+0100 (Western European Summer Time) Detail views: 1 GitHub clicks: 0 ## Safety Notice OSRepos shares public repositories for knowledge and discovery only. Review source code, dependencies, licenses, and security implications before running or installing anything. ## Content ## Introduction The `aporthq/aport-spec` repository introduces the **Open Agent Passport (OAP) v1.0 specification** (currently a draft), designed to establish a runtime trust rail for AI agents. As AI agents increasingly handle digital commerce, the critical challenge of trusting unseen agents emerges. OAP addresses this by providing a lightweight, cryptographically verifiable credential that enables real-time, pre-action authorization for AI agents across any platform. It shifts the focus from *who* built an agent to *what* it is allowed to do at the point of action. ## Why Use and Benefits The rapid acceleration of agentic commerce demands a robust trust infrastructure, which current solutions, primarily focused on agent identity, fail to provide. Merchants and platforms require instant verification and sub-100ms authorization decisions before sensitive data or money moves. OAP offers a comprehensive solution by providing the essential runtime trust layer for secure and scalable agentic commerce. Key benefits include: * **Pre-action Authorization**: Ensures agents are authorized before sensitive operations. * **Cryptographically Signed Decisions**: Provides immutable audit trails for all actions. * **Global Suspend Capabilities**: Allows for instant risk mitigation across platforms. * **Standardized Policy Packs**: Enables consistent enforcement of rules. * **Instant Trust**: Delivers authorization decisions in under 100 milliseconds. * **Standards Compliance**: Built to integrate with existing identity frameworks like W3C Verifiable Credentials and complement KYC/KYB. ## Implementation Guidance The `aport-spec` repository provides comprehensive guidance for both platform builders and developers looking to implement the OAP specification. **For Platform Builders:** 1. **Understand the Specification**: Begin by reading the [OAP v1.0 Specification](https://github.com/aporthq/aport-spec/blob/main/oap/oap-spec.md). 2. **Review Examples**: Explore the [examples](https://github.com/aporthq/aport-spec/tree/main/oap/examples) to understand implementation patterns. 3. **Validate Implementation**: Utilize the [conformance runner](https://github.com/aporthq/aport-spec/tree/main/conformance) for testing and validation. 4. **Integrate with VCs**: Follow the [VC mapping guide](https://github.com/aporthq/aport-spec/blob/main/oap/vc/vc-mapping.md) for Verifiable Credentials integration. **For Developers:** 1. **API Integration**: Use the [OpenAPI spec](https://github.com/aporthq/aport-spec/blob/main/api/openapi-generated.json) for client generation. 2. **SDK Implementation**: Follow the [integration guides](https://github.com/aporthq/aport-spec/blob/main/oap/vc/tools/INTEGRATION.md). 3. **Policy Development**: Review the [capability registry](https://github.com/aporthq/aport-spec/blob/main/oap/capability-registry.md) for defining agent capabilities. ## Examples The repository includes various examples to help developers understand and implement the OAP specification: * **Passport Examples**: See [Template Passport](https://github.com/aporthq/aport-spec/blob/main/oap/examples/passport.template.v1.json) and [Instance Passport](https://github.com/aporthq/aport-spec/blob/main/oap/examples/passport.instance.v1.json) for agent identity and capabilities. * **Decision Examples**: Review [Allow Decision](https://github.com/aporthq/aport-spec/blob/main/oap/examples/decision.allow.sample.json) and [Deny Decision](https://github.com/aporthq/aport-spec/blob/main/oap/examples/decision.deny.sample.json) for authorization decisions. * **Verifiable Credentials Examples**: Find [Passport and Decision as VCs](https://github.com/aporthq/aport-spec/tree/main/oap/vc/examples/) to understand VC integration. ## Links * [GitHub Repository: aporthq/aport-spec](https://github.com/aporthq/aport-spec) * [OAP v1.0 Specification](https://github.com/aporthq/aport-spec/blob/main/oap/oap-spec.md) * [Main Documentation](https://aport.io/docs/){:target="_blank"} * [Contributing Guide](https://github.com/aporthq/aport-spec/blob/main/CONTRIBUTING.md) * [License](https://github.com/aporthq/aport-spec/blob/main/LICENSE)