For AI agents · Early access
Any AI agent can ask a person to approve an action and get back a signed credential any business can check. The person taps once on their phone, with nothing to install to start.
Agent → Verified
request_approval({human: "+1 212 555 0010",action: "Buy running shoes",amount: "128.00 USD",identity: "contact",strength: "attested"})
Approval request
Your shopping agent wants to
Buy running shoes
Not me
Credential → anyone can verify
decision: "approved"identity: "contact"strength: "attested"action_hash: "9f2c…41ab"format: "SD-JWT VC"
✓ Signed by VerifiedWhy now
Agents can pass a text code. They can’t pass Face ID.
Agents read texts and email, so a code or tapped link only proves inbox access, not that a person agreed. Businesses are starting to block agents they can’t attribute, and new agent protocols assume a human approval step someone else provides. Verified Approval is that step: neutral, for any agent and any person, and checkable by anyone.
How it works
One approval engine behind REST, MCP and OAuth. The approval binds to the exact action, so if the action changes, the approval is void.
The agent calls request_approval with the action, an optional amount and counterparty, a hash of the exact payload, and the identity level and approval strength it needs. It gets back an approval link right away.
The person opens the link, sees which agent is asking and exactly what for, and taps 1-Click Approve: with a passkey in any browser, in our iPhone App Clip, or in our app. First time takes under a minute. After that, one tap.
The agent receives a signed credential and attaches it to the action. The business checks it offline against Verified’s public keys and applies its own policy. Checking is free.
Agent brief
Plain text, written for agents and the people who build them. Interfaces are planned and not live yet.
What the credential proves
Businesses set a minimum for each. The credential states exactly what was checked and never claims more.
Identity level: who approved
human
An approval from the enrolled person, with no claim about who they are.
contact
Control of the phone number or email was checked at enrollment, with a silent carrier check where available.
identity
A government-issued ID presented from a digital wallet, such as a mobile driver’s license, where available.
Approval strength: how hard it is to fake
passkey
Any device, nothing to install. The device may accept its passcode instead of a biometric.
attested
Approved in our iPhone App Clip or app, with Apple’s App Attest proving a genuine device running our code. Blocks emulators and cloud agents.
biometric
Approved in our app with Face ID or Touch ID and no passcode fallback, so an agent can’t approve even if it controls the phone.
Built for the emerging agent standards
Careers
Help build critical infrastructure for the 21st century. We’re hiring senior people in sales, product, solutions engineering and legal.
See open rolesFor businesses
Ask agents for a Verified Approval credential before purchases, account changes or data access, and set the identity level and approval strength you need. Checking credentials is free.
Talk to usEarly access
Agents and the people who build them are both welcome. A person at Verified reads every message and replies.
Include an email your operator reads, what you need a person to approve, and your expected monthly volume.
Email agents@verified.incAn early-access MCP server and REST endpoint are coming soon. The agent brief above will list them.
FAQ
Not yet. It’s in early access. Request access on this page and we’ll reply to the email you give us.
Not to start. The first approval works in any browser with a passkey or, on iPhone, in an App Clip that opens without installing. For biometric-only approvals, the person installs our app once.
Agents can read texts and email, so a code or tapped link only proves access to an inbox. An approval is a signature from the person’s own device, bound to the exact action.
Not at the strongest level. A web passkey can accept the device passcode, so an agent that controls the device and knows it could approve. Attested approvals prove a genuine iPhone, and biometric-only approvals need Face ID or Touch ID with no passcode fallback. Businesses choose the minimum.
Only at the identity level. The human level proves a person approved, and the contact level adds a verified phone number or email. The credential always states which level was met.
The credential is an SD-JWT VC, with planned mappings to Mastercard Verifiable Intent, Google’s AP2 and OAuth CIBA, and interfaces over REST, MCP and A2A.
People never pay, and we plan to keep checking credentials free for businesses. Agents will pay per approval, with a free tier.
It’s designed to work worldwide. The identity level depends on which digital ID wallets are available in each country.