- Platform
- Know Your Agent
Know Your Agent
Know who acts for whom.
You know your customers. Now know their agents. Vouched detects every AI agent on your site, enforces what each may do, and ties every action to the verified person who authorized it. Every agent visible. Every action governed.
The world’s leading agent detection and governance platform.
Vouched wrote KYA-OS, the open standard for agent identity, and the Decentralized Identity Foundation adopted it. Here’s what that looks like in production.
- KYA-OSAuthored by Vouched, adopted by the Decentralized Identity Foundation
- 70,000+Agents registered on KnowThat.ai
- 1000+Detection signals, tracking new agents as they appear
Agents we detect
Claude
ChatGPT
Gemini
Perplexity
Microsoft Copilot
Meta Muse
DeepSeek
Amazon Q- + many more
</>
The problem
Two questions you can’t answer. Yet.
Agents are already transacting on your site. Without identity, you can’t see them or tell the good from the bad.
Are AI agents even on my website?
They’re already here, browsing and buying, invisible to your security policies. The same bad actors who used bots now use AI agents to commit fraud.
growth in AI agent traffic in 30 days across Know Your Agent: Detect customers.
Source: Know Your Agent: Detect, June 2026Can you tell a real buyer from a rogue agent?
Most sites have two blunt choices: block every agent and turn real buyers away, or allow every agent and let rogue ones transact.
Compliance
Without a person in the loop, terms can be accepted and purchases made without direct authorization.
Fraud
Malicious actors use AI agents to get around traditional fraud controls, at scale.
Reputation
When agents transact without permission and customers are unhappy, the merchant pays the price.
Agent maturity assessment
Find out how ready you are for AI agents.
When the actor isn’t human, trust has to come from somewhere else. Benchmark your readiness and get a clear path forward.
- 11questions
- 5minutes
- 1score and action plan
Covers visibility, policy, oversight and security.
Take the assessment- NascentAgents are present but unseen.
- EmergingSeen, but controls are blunt.
- AdvancedTrust applied deliberately.
- MasteryGovernance becomes an advantage.
The answer
No agent gets through unchecked.
Every agent authenticated by a person. Autonomous agents aren’t anonymous agents. Built on open standards, and tuned to your risk policies.
Detect
Know every agent.- Every AI agent named as it arrives
- Behavioral detection, not claimed identity
- One line on your site, live in five minutes
Enforce
Control every interaction.- Allow, challenge, block or redirect
- Plain-language rules compiled to Cedar
- At the edge or in your app
Govern
Trust every outcome.- Delegations with scopes and limits
- A cryptographic proof on every request
- A full audit trail
Delegate
Act for you, not as you.- Agents with their own identity, via IdentiClaw
- Scoped permissions and a kill switch
- Every action attributed
Full control
Every agent interaction, accounted for.
Authentication
Verify the identity of people and the agents acting on their behalf.
Delegation
Define exactly which actions an agent is authorized to perform.
Legal authorization
Require explicit approval before an agent makes a binding commitment.
Revocation
Revoke permissions instantly as risk conditions change.
Auditability
Keep complete audit trails for security, compliance and oversight.
Open standards
Standards before solutions.
Before building Know Your Agent, Vouched authored the standard it runs on, and gave it away.
KYA-OS
Know Your Agent Operating System: the open standard for AI agent identity and authorization. The Model Context Protocol defines how agents talk to systems, but not who they are. KYA-OS adds the identity, so agents can prove who they represent and whether they have permission to act. Vouched authored it and donated it to the Decentralized Identity Foundation.
Read the spec →KnowThat.ai
A public registry of AI agents. Look up an agent’s signature, identify its vendor and check its reputation before you let it in.
Explore the registry →Know Your Agent issues delegations as Ed25519-signed W3C VC-JWTs (VC Data Model 1.1). Vouched works with the Decentralized Identity Foundation, the Agentic AI Foundation, the Advanced AI Society and the Wall Street Blockchain Alliance.
Recognition
Ranked first for agent authentication.
More recognition for Vouched
In the news
Across the account lifecycle
From the person to the agents acting for them.
Verify establishes who a person is. Assure proves it’s still them. Know Your Agent extends that trust to every agent they send.
Enroll
Establish who a person is.
Vouched Verify → Assure (Recurring)Recover
Re-establish trust when the factor is gone.
Vouched Assure → Assure (Recurring)Step up
Raise assurance at the moment risk rises.
Step-up MFA →Authorize
Tie an agent’s permissions to a person you’ve verified.
You’re hereGet started
Free tier. Unlimited detection. No credit card.
Start free in minutes, or book a walkthrough on your own agent traffic. Either way, you’ll see what’s been invisible, decide what agents can do, and keep a record of every decision.
- Vercel
- Netlify
- Railway
- Shopify
- Cloudflare
- Next.js
- Express
- .NET
- Java
Benchmark your agent risk
Get a maturity score and an action plan for AI agent traffic in about five minutes.
Take the assessment →No install needed
Run a free Hi-AI audit to see whether AI assistants can find and read your site.
Run a Hi-AI audit →FAQ
Know Your Agent, answered.
Straight answers about AI agents, agentic commerce and KYA.
Contact us with a questionWhat is Know Your Agent (KYA)?
Know Your Agent is the agent-era counterpart to Know Your Customer: verifying the identity, authority and accountability of the AI agents acting on your website and APIs. Vouched authored the KYA-OS standard, donated it to the Decentralized Identity Foundation, and built Know Your Agent as the product suite that implements it.
How do I detect AI agents on my website?
Add Detect with one line: the Marketing Pixel, the Beacon SDK, Middleware or the Gateway. Every session is classified as human, AI agent, bot or incomplete data, with a confidence score from 0 to 100. It’s live in five minutes and blocks nothing.
What is the difference between a bot and an AI agent?
Bots are crawlers, scrapers and automated tools, such as Googlebot. AI agents are AI assistants, such as ChatGPT, Claude, Perplexity and Gemini, that browse and act for a person, including shopping and checking out.
Can AI agents shop and buy on my site without me knowing?
Yes. They’re already browsing and buying on many sites, invisible to security policies. Across Know Your Agent: Detect customers, AI agent traffic grew 2.4 times in 30 days.
What is agentic commerce?
Agentic commerce is when AI agents shop, book and buy on behalf of people. It needs a way to know which agent is acting, for whom, and with what permission.
Do I need to change my checkout to accept agent purchases?
No. Detection runs with one line and doesn’t touch your checkout. When you’re ready, Enforce can let verified agents through and challenge the rest, without rebuilding checkout.
How do I stop AI agent fraud without turning away real buyers?
Instead of blocking or allowing every agent, Enforce applies a policy to each request based on its class, confidence and whether it carries a verified delegation: allow, challenge, block or redirect.
How does AI agent identity verification work?
Agents prove who they are cryptographically, with signed HTTP message signatures or KYA-OS identities, and carry a delegation tied to the verified person they act for. Vouched verifies both on each request.
Who is accountable when an AI agent buys something?
Know Your Agent ties every agent to the person who authorized it, with the scopes and time limits they agreed to, in a verifiable credential and an audit trail. That gives you a clear record of who authorized what.
Is KYA an open standard?
Yes. Vouched authored KYA-OS and donated it to the Decentralized Identity Foundation. Know Your Agent issues delegations as Ed25519-signed W3C VC-JWTs (VC Data Model 1.1).
Will Know Your Agent block my customers or slow my site down?
Not unless you choose to. Detect only observes, and the Pixel and Beacon run asynchronously. You decide when to enforce, and you can dry-run a policy on real traffic first.
Does Know Your Agent work with my platform?
Detect works on any site with the Pixel or Beacon. Middleware supports Next.js, Express, ASP.NET Core and Java, the Gateway runs at the Cloudflare edge, and there are integrations for Vercel, Netlify, Railway and Shopify.
What does Know Your Agent cost?
There’s a free tier with unlimited detection and no credit card required. See pricing.
The KYA newsletter
Be first to know what agents do next.
AI agents change something every week. Once a month, we’ll send you what’s new in agent identity, KYA‑OS and the fixes that actually work, so you’re always a step ahead. No spam, ever.