The Trusted Agentic Commerce Protocol

Sharing a proposal for a secure authentication and data encryption protocol for AI agents, merchants and merchant vendors. It combines:

- JWT with digital signatures for request authentication (RSA or EC) - JSON Web Encryption (JWE) for sensitive data protection - JSON Web Key Sets (JWKS) for key distribution

Taking inspiration from ideas like Cloudflare’s essential Web Bot Auth, we've mapped out a comprehensive standard that captures the key use cases to enable safe, secure agentic commerce – from capturing intent, consent and user preferences, to handling cart items, payment details, and order statuses.