Proof Launches x401 Protocol to Bring Verified Legal Identity to AI Agents

Proof has launched x401, an open protocol designed to provide verified legal identity and transaction authorization for AI agents. As businesses increasingly face "agentic" traffic, the ability to cryptographically prove who an AI is acting for—and what they specifically authorized—is becoming a critical requirement for secure digital commerce and regulatory compliance.

What was announced

Proof’s launch introduces a trust layer for the "agentic web," enabling AI assistants to carry out complex tasks like wire transfers, approve itemized purchases, and sign payment mandates. The system relies on three core components: an agent identity wallet that displays transaction terms for user approval, the x401 open HTTP protocol for requesting and verifying evidence, and a production Model Context Protocol (MCP) server. This server is compatible with major AI assistants including Meta’s Muse, Grok, Claude, and ChatGPT dots.

The x401 protocol extends the standard HTTP 401 unauthorized-response mechanism. This allows a website to specify exactly what evidence an agent must provide—such as legal name, age, or nationality—before a transaction proceeds. Crucially, the user’s wallet signs the request on their own device, ensuring the agent cannot unilaterally alter terms like the recipient or amount without breaking the cryptographic signature. If any signed terms are changed by the agent, the signature will no longer validate, providing a safeguard against unauthorized autonomous actions.

This infrastructure arrives as businesses grapple with the risks of automated agents; Amazon recently blocked Meta’s Muse from its marketplace due to a lack of reliable authorization. The solution also aligns with September guidance from FinCEN and federal banking regulators, which recognized digital certificates and verifiable credentials as permissible methods for customer identity verification under specific conditions. Websites can request these verified identity claims without a negotiated agreement, with the option to pay per claim over x402.

The companies involved

Proof is an identity and legal authorization platform that has established a significant presence in the digital credential space. The company, which operates the proof.com domain, has recently focused on bridging the gap between traditional legal identity and the emerging requirements of AI-driven commerce. Its leadership includes founder and CEO Pat Kinsel, who is also associated with TechNet: The Voice of American Innovation. The firm has positioned itself as a provider of open web infrastructure, aiming to standardize how identity is proofed, issued, and presented across the internet.

Superfluid is a key collaborator in this ecosystem, led by Founder and CEO ZhiCheng Miao. The company focuses on building wallet infrastructure designed for a world where humans and AI agents operate in tandem. Superfluid’s integration with the x401 protocol aims to provide users with portable, verifiable identities, ensuring that the services agents interact with can reliably identify the human principal behind the software. By providing the wallet architecture that supports these cryptographic signatures, Superfluid helps establish the foundation for agentic commerce, where users maintain control over what their automated representatives can execute in their name.

What FF News has reported before

FF News has closely followed Proof’s expansion into AI-secured commerce and digital identity. In October 2026, the publication covered how Proof and Circle Bridge Verified Identity and USDC for Secure AI Agent Commerce, a move that integrated stablecoin payments with identity verification. This followed a key expansion of the leadership team, as Proof Appoints Fintech Veteran Jeremiah Glodoveza as CMO to Scale Identity Authorization Network.

Earlier in 2026, the company responded to shifting regulatory landscapes when Proof Launches Portable Verifiable Digital Credentials Following New U.S. Banking Guidance. This regulatory alignment was also evident in July, when Proof and Enigma Launch Verified Business Identity to Secure Brands and Combat AI Fraud, targeting the rising threat of synthetic identities in corporate environments.

What this means

The rise of autonomous AI agents presents a fundamental challenge to the "know your customer" (KYC) frameworks that underpin global finance. Amazon’s decision to block agentic traffic highlights a growing defensive posture among major platforms that could stifle the utility of AI assistants if left unaddressed. By moving identity verification into an open protocol, the industry is attempting to prevent a fragmented ecosystem where every merchant requires a bespoke integration. This announcement puts pressure on traditional identity providers to move beyond static document verification toward real-time, cryptographic authorization. The central question for the sector remains whether major web platforms will adopt these open standards or continue to favor closed, proprietary gatekeeping.