AxioRankZero-Trust for AI Agents
Open the console

Identity plane

OAuth Server Metadata (RFC 8414)

Resolve an authorization server's metadata; score PKCE, implicit-flow, and domain-bound endpoints (verifies signed_metadata when present).

View coverage matrixRead the spec

Live in the gateway today.

What it answers

Who is it, cryptographically?

OAuth Server Metadata (RFC 8414) sits in the identity plane of the agent-interop stack. Who is it, cryptographically? AxioRank tracks it as one row in a coverage matrix that spans six planes, from discovery and identity to authorization, content permission, and commerce.

Plane

Identity

Status

live

Direction

outbound

How AxioRank handles it

Governed, not just listed.

Live in the gateway today. Outbound: when the agents you run reach out to other agents and services.

Read the OAuth Server Metadata (RFC 8414) specification

More identity protocols

Related protocols

Web Bot Auth (RFC 9421)

Ed25519 HTTP Message Signatures verify the AI agents that visit your site.

Open

A2A Signed Cards (JWS)

Verify a card's JWS and flag keys not anchored to the issuer's own domain.

Open

W3C Decentralized Identifiers (did:wba)

Verify an agent's decentralized identifier and control proof, the ANP identity layer.

Open

W3C Verifiable Credentials 2.0

Verify a standalone W3C VC 2.0 (Data Integrity or JOSE proof), the credential primitive under AP2 mandates and did:wba.

Open

Visa Trusted Agent Protocol (TAP)

Verify the RFC 9421 agent-recognition signature and parse the signed consumer/intent proofs a TAP agent presents at checkout.

Open

All protocols

The full coverage matrix across six planes.

Open

Govern the whole agent stack

AxioRank verifies identities and capabilities across the agent ecosystem, from discovery to commerce. See the full coverage matrix, machine-readable.

View coverageRead the docs