Skip to content
TopicTracker
From HackerNewsView original
TranslationTranslation

X401: HTTP-Native Identity Exchange for the Agentic Web

Proof announced X401, an HTTP-native identity exchange protocol designed for the agentic web. It enables secure, agent-to-agent authentication and authorization without traditional API keys or OAuth redirects, using a lightweight, request-based mechanism.

Background

- HTTP was designed for fetching pages; it has no built-in identity system. Today's workarounds (cookies, API keys, OAuth) weren't part of the original design. - Proof builds tools for "verifiable credentials" — cryptographically signed digital documents that can be proven genuine without contacting the issuer. - The "agentic web" is a vision where autonomous AI agents (e.g., a travel-booking assistant) act for users and must identify themselves to services without human help. - X401 is a proposed protocol embedding identity credentials directly in HTTP requests. An agent attaches a verifiable credential to its request, letting the server cryptographically verify its identity and permissions without a separate session or token exchange. - Why it matters: current identity methods break when agents operate asynchronously or across domains. X401 makes agent-to-server identity verification as native to HTTP as GET and POST.

Related stories