ArcenAuth enables parent agents and human controllers to issue scoped, cryptographically signed credentials to worker agents.
Issuing a Mandate (agent.issueMandate)
Creates and cryptographically signs an ArcenPayAgentMandate:
Delegating Sub-Mandates (agent.issueSubMandate)
A worker agent can delegate a subset of its authority to sub-agents. The SDK validates monotonic scope narrowing (isScopeSubset):
Revoking Mandates (agent.revokeMandate)
Revokes an active mandate:
Policy Evaluation (agent.addPolicy, agent.checkPolicy)
Registers declarative rules and tests transactions against deterministic precedence:
Cryptographic signing
issueMandate signs the mandate with the agent’s key using the chain family’s scheme:
- EVM — EIP-712 typed structured data (
ArcenPay Agent Mandate / 1).
- Stellar — Ed25519 over the
ArcenPay x402 Payment\n domain-separated prefix.
- Solana — Ed25519 with base58 encoding.
x401 Human-In-The-Loop Attestation
Attach an x401 attestation record to a mandate for high-value transactions:
Last modified on October 4, 2026