01
KNOW YOUR AGENT
Every AI agent that transacts gets a verified identity. Scoped. Fingerprinted. Bounded by policy before it touches money. No anonymous agents. No unchecked access.
The authorization layer for AI-driven payments. Every agent transaction is verified, enforced, and auditable — before money moves.
Very soon there will be more agents than humans making transactions — because agents cannot open bank accounts the way humans can.
Brian Armstrong — CEO, Coinbase
AAP
We built the authorization layer for agents.
Visa is embedding payments directly into agentic workflows.
Visa Intelligent Commerce — Launch, 2026
AAP
The rails exist. The authorization doesn't. Until now.
The agent economy has payment rails. It didn't have a wallet standard. We built one.
MoonPay Open Wallet Standard — March 2026
Backed by Ethereum Foundation · Solana Foundation · PayPal
AAP
The wallet is one layer. Compliance is another. That's ours.
01
Every AI agent that transacts gets a verified identity. Scoped. Fingerprinted. Bounded by policy before it touches money. No anonymous agents. No unchecked access.
02
Every transaction request runs through a live authorization engine — sanctions screening, OPA policy evaluation, and spend limit checks — before a dollar moves. One of three decisions: ALLOW, DENY, or ESCALATE to a human. If Stripe moves money, AAP decides if it should move at all.
03
A cryptographic audit chain captures every decision, every approval, every denial. Immutable. Auditable. Built for the regulators, auditors, and enterprise compliance teams that will ask for it.
Auth0
Agent authenticates. Identity established and scoped.
KYA Engine
Agent fingerprinted. Trust level assigned. Max Trust Level 2 within AAP.
Enforcement Engine
Comply Advantage sanctions check. OPA policy eval. ALLOW / DENY / ESCALATE issued.
ATXP Wallet
Per-agent protected wallet. Spend controls enforced at the custody layer.
X402 · Modern Treasury
Payment executes via X402 or Modern Treasury. Audit chain sealed.
Transaction cleared. Executes immediately. Logged.
Transaction blocked. Reason recorded. Audit trail updated.
Routed to human approval workflow. Held until decision issued.
Protocol Specification
AAP-SPEC-v0.1
The full technical specification. Trust levels, grant schema, canonical signing format, audit chain construction.
Read Spec →Quickstart
INTEGRATE IN MINUTES
Generate a keypair, register an agent identity, submit a signed intent, and read your first audit receipt.
Get Started →Error Reference
ERROR CODES
Every error code the enforcement engine can return, with cause, resolution, and example response payloads.
View Errors →Interactive
SANDBOX PLAYGROUND
Run the full AAP authorization flow live. Generate keys, build intents, sign, verify, and inspect the audit chain.
Launch Playground →AAP is published under Apache 2.0. Any team can implement, fork, or extend the protocol. The copyright is held by AGSM LLC. The standard belongs to everyone who builds on it.
External contributors are subject to the AAP Contributor License Agreement.
Harmoney Financial Technologies is the first company to implement AAP at production scale. Payment links. AI agent wallets. Spend controls. Human approvals. A full compliance stack, live in sandbox today.
| Layer | Component | Description | Status |
|---|---|---|---|
| Identity | Auth0 by Okta | Agent authentication, session management, role scoping | Partnership Active |
| Verification | KYA Engine | Per-agent identity fingerprinting and trust level assignment | Open Source |
| Compliance | Comply Advantage | Real-time sanctions screening and watchlist monitoring | Enterprise |
| Policy | Open Policy Agent | Declarative policy evaluation engine | Open Source |
| Custody | ATXP | Per-agent protected wallets with spend controls | Proprietary |
| Rails | Coinbase X402 | HTTP-native machine-to-machine payment protocol | Integration |
| Rails | Modern Treasury | ACH, RTP, USDC settlement and payment orchestration | Signed |
| Data | Plaid | Bank account verification and financial data connectivity | Signed |