Skip to main content
ArcenAuth enables parent agents and human controllers to issue scoped, cryptographically signed credentials to worker agents.

Issuing a Mandate (agent.issueMandate)

Creates and cryptographically signs an ArcenPayAgentMandate:

Delegating Sub-Mandates (agent.issueSubMandate)

A worker agent can delegate a subset of its authority to sub-agents. The SDK validates monotonic scope narrowing (isScopeSubset):

Revoking Mandates (agent.revokeMandate)

Revokes an active mandate:

Policy Evaluation (agent.addPolicy, agent.checkPolicy)

Registers declarative rules and tests transactions against deterministic precedence:

Cryptographic signing

issueMandate signs the mandate with the agent’s key using the chain family’s scheme:
  • EVM — EIP-712 typed structured data (ArcenPay Agent Mandate / 1).
  • Stellar — Ed25519 over the ArcenPay x402 Payment\n domain-separated prefix.
  • Solana — Ed25519 with base58 encoding.

x401 Human-In-The-Loop Attestation

Attach an x401 attestation record to a mandate for high-value transactions:
Last modified on October 4, 2026