Agent verification provider
Trulioo
In short
Trulioo proposed Know Your Agent in August 2025 with a five-step flow, from checking the developer to ongoing lookups, and Worldpay was named as a merchant-side partner. The product is now in alpha: businesses behind an agent get KYB and AML checks and a signed, revocable profile that counterparties confirm by API or MCP, though access is by request.
- Type
- Verification provider
- Homepage
- trulioo.com
- In one line
- Identity verification company whose Know Your Agent programme, in alpha, runs business and AML checks on the company behind an AI agent, binds the agent's fingerprint to it in a signed Digital Agent Profile and lets counterparties check it by API or MCP.
- Last read
- 2026-11-05
What Trulioo does for this layer
From the vendor's own pages
Trulioo's product page says Know Your Agent "is in Alpha" and that the first release binds a verified developer organisation and an agent fingerprint in a verifiable Digital Agent Profile. (trulioo.com) Trulioo's KYA checks the developer organisation behind an agent with Know Your Business and anti-money-laundering checks and confirms that the organisation controls its domain. (trulioo.com) Trulioo issues a signed, time-bound credential recording an agent's permitted scope, which can be revoked, and packages the result as a continuously updated JWT called the Digital Agent Profile. (trulioo.com) Trulioo gives counterparties API and Model Context Protocol access to confirm an agent's profile, scope and status before they apply their own access policies. (trulioo.com)
Trulioo introduced KYA in a report co-written with the payments platform PayOS, described on its blog on 25 Aug 2025. (trulioo.com, dated 2025-08-25) Trulioo's August 2025 blog listed five KYA steps: verify the agent developer, lock the agent code, capture user permission, issue a Digital Agent Passport and run ongoing lookups. (trulioo.com, dated 2025-08-25) Trulioo said Worldpay would let merchants use the KYA framework to validate consumer intent and the authority granted to shopping agents. (trulioo.com, dated 2025-08-25)
What our crawl saw
Trulioo's August 2025 blog called the token a Digital Agent Passport, while the product page of 2026-11-05 calls it a Digital Agent Profile; both use the abbreviation DAP. (trulioo.com)
Products and plans
| Product | What it does | Price model | From | As of |
|---|---|---|---|---|
| Know Your Agent (KYA) | Developer KYB and AML checks, agent fingerprinting and a signed Digital Agent Profile with scope, checkable by API or MCP. | alpha, access on request | Not published | 2026-11-05 |
Standards
| Standard | Status | Evidence |
|---|---|---|
| Web Bot Auth | No statement | The KYA page refers to an agent's "cryptographic identity" without naming Web Bot Auth or HTTP Message Signatures (checked 2026-11-05). |
| Visa Trusted Agent Protocol | No statement | No Trusted Agent Protocol mention on the KYA page or blog (checked 2026-11-05). |
| Mastercard Agent Pay | No statement | No Agent Pay mention on the KYA page or blog (checked 2026-11-05). |
Our checks
| Check | Result | Method | Date |
|---|---|---|---|
| Homepage fetch | HTTP 200 | GET with the crawl user agent after a robots.txt check | 2026-11-05 |
What Trulioo does not do
- Trulioo's KYA does not sit in front of a website or block traffic; counterparties query the profile and enforce their own policy.
- Trulioo's KYA is in alpha with access by request and no published price (product page read 2026-11-05).
Related pages on this site
Sources
Last reviewed 2026-11-05