Ratify Protocol

The cryptographic trust protocol for AI agents. When a human authorizes an agent — or one agent transacts with another — Ratify produces a signed, verifiable proof of *who* authorized *what*, *within which bounds*, and *for how long*. Any party can check it in under a millisecond.

Quickstart (60 seconds) Concepts — Delegate, Present, Verify View on GitHub

Where to start

Build with the protocol

Open SDKs in Go, TypeScript, Python, and Rust. Free under Apache-2.0. Byte-for-byte interoperable across all four. Pick a language →

Understand the protocol

The mental model is three verbs: Delegate, Present, Verify. Same primitive for human → agent and agent → agent. Read the deep dive →

Integrate a surface

Meetings (Zoom / Teams / Meet), voice gateways, API gateways, physical AI. Same wire format everywhere. See the integration guides →

Deploy Ratify Verify

The managed control plane — hosted revocation, audit archive, policy enforcement at scale. For enterprises. Learn what Verify adds →

Three verbs, one primitive

   DELEGATE                  PRESENT                   VERIFY
   ────────                  ───────                   ──────
   Principal signs a         Presenter (agent)         Any third party
   DelegationCert            carries the cert          runs the verifier.
   naming the subject,       and signs a fresh         Both Ed25519 AND
   the scopes, and the       challenge on every        ML-DSA-65 must
   expiration.               interaction.              verify. Yes/no
                                                       in <1ms. No trust
   Human → Agent OR          Proves "this key is       relationship with
   Agent → Agent.            live right now."          presenter required.

The same primitive works in both directions. A human delegating to their AI assistant and one AI agent sub-delegating to another use the exact same verifier algorithm and the same cryptographic guarantees.

Quantum-safe by design

Every signature is a hybrid pair: Ed25519 + ML-DSA-65 (NIST FIPS 204). Both must verify. Bundles signed today remain unforgeable even when a cryptographically-relevant quantum computer exists.

Two products, one protocol

The Ratify Protocol is open — spec under CC-BY-4.0, SDKs under Apache-2.0, reference verifier free for everyone. GitHub →
Ratify Verify is the managed control plane Identities AI sells to enterprises — hosted revocation, audit archive, policy enforcement, the meetings/voice/API/physical-AI adapters. What Verify adds →

You can use the open protocol forever without ever touching Verify. Verify exists for teams that want production-grade infrastructure without running it themselves.

Maintained by Identities AI, Inc. Ratify Protocol™ and identities.ai™ are trademarks of Identities AI, Inc. U.S. patent application pending.