Dark
Request a walkthrough

KNOW YOUR AGENT

Verify signed agents before you decide how to treat them

A display name or user-agent string is a claim, not proof. Know Your Agent verifies supported signed-agent identity claims and records the result beside the risk read.

Request a walkthroughRead the documentation

Evidence about an automated client's identity claim

Verification shows possession of an accepted agent credential under a supported protocol. It does not show intent.

Verification result

  • Verified

    A verified claim adds context.

  • Unsigned

    Stays unknown, not hostile.

  • Invalid signature

    An invalid signature is a risk signal.

  • Expired

    Expired signatures are detected.

  • Replayed

    Replayed signatures are detected.

Recorded beside the risk read

The result contributes to the risk read. Any allow, challenge or deny decision stays in your own logic.

A verified agent still passes your normal authentication and authorization.

Every request resolves to a plain result state, recorded beside the risk readIllustration with example labels, not customer data.

  • Signed-request verification

  • A clear result state

  • Context beside the risk read

  • Operator view

From a signed request to a recorded result

  1. External agent

    Signed request

    A supported agent signs its request and declares where its public key can be found.

  2. Noxtica

    Verifies and records

    Signed request

    Checks the signature, key reference and validity window. The result is recorded beside the risk read.

  3. Your policy

    Your own logic

    Result state

    Observe matches and non-matches, review unknown agents and apply your own policy.

  4. Noxtica

    Enforcement

    Enforcement is roadmap, not part of this offer

    Roadmap

How a signed agent request is verified and recorded, and where enforcement sits on the roadmap

  1. The agent signs its request

  2. Noxtica verifies the claim

  3. You observe and decide

What Know Your Agent does not do

  • Controlled availability. Eligibility, supported identity standards, and setup depend on tenant provisioning.
  • Verify and observe today. Enforcement is roadmap and is not part of what this page offers.
  • Verification is not trust. It does not prove intent, delegated authority, or the person behind an agent.
  • Results are evidence. Your team makes the decision.

Scores, reasons and verdicts are probabilistic estimates, not statements of fact. Your team makes every decision.Read the disclaimer

Related products

Confirm eligibility before you plan around it

Request a walkthroughAll products