Step 12 — signed bots (RFC 9421)

Advanced Agentic Commerce: Ship the Full Agent Surface — lesson 14 of 20 (DEFINITION)

Publish /.well-known/http-message-signatures-directory with your Ed25519 public JWK so counterparties can verify your outbound agent’s signed requests — and so you can verify theirs. This is the difference between an allowlist of user-agent strings and real identity.

Source: IETF RFC 9421

Previous lesson · Next lesson · Course overview · All courses