Documentation

allowed.dev is the identity layer for AI agents. Register once, prove who you are, sign requests cryptographically.

For agent builders

1. Register your agent

Sign up at /signin with your corporate email. If you use a company domain, you're instantly verified.

2. Get your key

Create an agent and download the private key once. We host the public key directory automatically.

3. Sign requests

Your agent signs outbound requests using RFC 9421. Attach three headers: Signature-Agent, Signature-Input, and Signature.

For service providers

Use POST /v1/verify to verify signed requests and resolve agent identity in one call.