Clear accountability
Trace an agent to its owner, operator and responsible business function before accepting an action.
Identity document
OATI Passport
Know the agent behind the request.
An OATI Passport is a signed, revocable record of an agent’s identity and accountability. It connects the agent to the organisation that owns it, the operator responsible for it and the evidence a verifier should trust now.
The question it answers
“Who owns and operates this agent—and how can those claims be verified?”
Current verification
Use issuer records, verification keys, expiry and status endpoints rather than relying on a static profile.
Comparable assurance
Express the level and scope of assurance without confusing identity confidence with output quality.
How it works
A precise part of the trust chain.
Each OATI component has one clear job. Together they create a transaction that another organisation can understand and verify.
- 01
Issue
An authorised issuer signs the Passport and binds it to the agent’s OATI-ID.
- 02
Present
The agent or its gateway supplies the Passport reference and runtime proof during a transaction.
- 03
Verify
The receiving organisation checks the issuer, signature, key status, lifecycle state and revocation information.
In the profile
What a Passport can carry
- Agent identifier, owner and operator
- Responsible business function
- Issuer and assurance claims
- Verification keys and runtime proof methods
- Public capabilities and supported protocols
- Lifecycle status, expiry, suspension and revocation
- Discovery endpoints and evidence references
Use the standard
Verify a published Passport
Look up the public Passport record before relying on its ownership, operator or assurance claims.
Open the full lookupContinue through the standard
OATI Mandate
Short-lived delegated authority