AgentID – The Verification Layer for AI Agents

Inspiration

As AI agents become more autonomous, we identified a structural gap in the internet’s architecture: agents can act, but they cannot prove who they represent.

Websites respond by blocking automated traffic because there is no reliable way to distinguish a legitimate personal agent from spam, or large-scale data harvesting.

What We Built

AgentID is an identity verification layer for AI agents, powered by BankID, which 99.9% of Swedes use in the ages 18-67.

Core Components

MCP Server
A one-click install MCP server for personal AI agents, enabling identity binding at the agent level.
https://www.npmjs.com/package/@agent-id/mcp
Framework Integrations
NPM packages for major web frameworks (Next.js, Express.js, etc.) that allow services to verify AgentID certificates with minimal integration effort.
Example: https://www.npmjs.com/package/@agent-id/nextjs
Certificate Issuer Service
A central issuance service that binds a BankID-verified human identity to an AI agent and issues time-limited cryptographic credentials.
https://agentidapp.vercel.app/

How It Works

A human authenticates using BankID.
AgentID binds that verified identity to a specific AI agent instance.
A time-limited RS256-signed JWT is issued.
The agent attaches this certificate to every HTTP request.
Third-party services verify the certificate offline using standard JWT signature verification.

This allows services to distinguish legitimate, accountable AI agents from anonymous automation — without relying on CAPTCHAs, IP heuristics, or fragile bot detection systems.