AxioRankZero-Trust for AI Agents
Open the console

Identity plane

SPIFFE / SVID

Verify a workload's JWT-SVID against its trust-domain bundle and flag federated (cross-trust-domain) identities.

View coverage matrixRead the spec

Live in the gateway today.

What it answers

Who is it, cryptographically?

SPIFFE / SVID sits in the identity plane of the agent-interop stack. Who is it, cryptographically? AxioRank tracks it as one row in a coverage matrix that spans six planes, from discovery and identity to authorization, content permission, and commerce.

Plane

Identity

Status

live

Direction

both

How AxioRank handles it

Governed, not just listed.

Live in the gateway today. Both directions: agents you run, and agents that reach you.

Read the SPIFFE / SVID specification

More identity protocols

Related protocols

Web Bot Auth (RFC 9421)

Ed25519 HTTP Message Signatures verify the AI agents that visit your site.

Open

A2A Signed Cards (JWS)

Verify a card's JWS and flag keys not anchored to the issuer's own domain.

Open

OAuth Server Metadata (RFC 8414)

Resolve an authorization server's metadata; score PKCE, implicit-flow, and domain-bound endpoints (verifies signed_metadata when present).

Open

W3C Decentralized Identifiers (did:wba)

Verify an agent's decentralized identifier and control proof, the ANP identity layer.

Open

W3C Verifiable Credentials 2.0

Verify a standalone W3C VC 2.0 (Data Integrity or JOSE proof), the credential primitive under AP2 mandates and did:wba.

Open

All protocols

The full coverage matrix across six planes.

Open

Govern the whole agent stack

AxioRank verifies identities and capabilities across the agent ecosystem, from discovery to commerce. See the full coverage matrix, machine-readable.

View coverageRead the docs