The Agent Signup Protocol · ASP-0.1

Vyana is the broker and open protocol that lets AI agents create accounts and make payments on your behalf — bounded by a consent mandate you sign once, verified through a seven-layer chain, and provable with signed receipts.

Sign up anywhere

Agents create real accounts at any ASP-aware merchant — no shared passwords, no card sitting on file.

Spend within bounds

Every action is checked against your User Consent Mandate — per-transaction, daily, and monthly caps.

Provable by design

Each signup and payment returns a signed receipt (ACR / AOC). Credentials are vaulted, never exposed.

Not a wrapper

A signed consent protocol — not a stored key.

Most “agent payment” tools stash an API key and hope. Vyana issues a cryptographic User Consent Mandate, then verifies every request against it — in fixed order — before a merchant ever sees it. The mandate is yours: scoped, capped, expiring, and revocable.

Money is always integer paise. Authority is always signed. Nothing an agent does exceeds what you allowed.

A family of protocols

ASP creates the account. APP authorizes the spend. One consent binds both.

Vyana isn’t a single endpoint — it’s an open protocol family under one revocable User Consent Mandate and one provenance chain. ASP and APP are specced today; the rest extend the same trust model across the agent-commerce lifecycle.

ASP · 0.1 live reference

Agent Signup Protocol

Can this agent create or connect this merchant account — with proof the user authorized it?

outputs Credential Capsule ACR AOC
APP · 0.1 draft RFC

Agent Payment Protocol

Can this agent spend this amount with this merchant, and did settlement actually happen?

outputs Cart Mandate Payment Receipt Settlement Receipt
the rest of the family planned

Same invariant, across the lifecycle

Bounded, signed, verifiable delegation — extended past signup and payment into the full agent-commerce flow.

Receipts Cancellation Preferences Disputes
Interoperability

We also speak AP2 — Google's standard for agent payments.

In September 2025, Google announced AP2 with roughly sixty partner organizations — Mastercard, PayPal, American Express, Coinbase, Stripe, Adyen, and counting. April 2026 brought spec v0.2.0, with three SD-JWT Verifiable Credentials replacing the original draft. Vyana implements that spec natively. Every AP2 mandate is signed by the same Ed25519 keys that sign our native ASP/APP objects — no new trust root, no rewrite of the payment path.

mandate.checkout.open.1

Open Checkout Mandate

Delegated authority. The user authorizes future checkouts within stated constraints.

constraints: allowed_merchants, line_items
cnf: holder key (RFC 7800)
mandate.payment.1

Payment Mandate

Execute the payment against that cart — the chain closes here.

transaction_id: checkout_hash
payee, payment_amount, payment_instrument
3
SD-JWT mandates
1:1
INR ↔ minor units
30
tests, all green
0
gateway needed
How the interop works Watch the 90-second demo AP2 v0.2.0 · SD-JWT VC + EdDSA · vendored canonical schemas
How it works

Your agent asks. Vyana verifies and signs. The merchant fulfills.

The broker sits between your coding agent and the merchant — it never lets a request through until it clears the chain, and it hands back receipts both sides can prove.

signed request verified token (SIT) Agent MCP · CLI · paired tool Vyana broker verify & sign CONSENT · VERIFY · VAULT · PROOF Merchant create & attest Consent mandate UCM · user-signed 7-layer verify signature → replay Credential vault AES-256-GCM Signed receipts ACR · AOC

A signed request enters · Vyana verifies and signs · the merchant fulfills — every step provable.

Who connects · today → next
live · today

Coding assistants

Right now your agent pairs over MCP or the CLI and signs each request with the paired device key.

MCP server Terminal CLI Claude Code Cursor
The verify chain

Seven layers, in fixed order. Any one can stop the request.

Every signup and payment runs the same chain — and each layer appends a provenance event, so the whole decision is auditable end to end.

1
Sequential gatesThe request cannot jump ahead; each layer must clear before the next one runs.
2
Fail-closed by designSignature mismatch, expired mandate, over-cap amount, bad scope, or replay stops the flow.
3
Audit trail as outputEvery pass or stop appends provenance, so the decision is explainable after the fact.
one failed gate stops the request
01signaturePaired device proves who initiated it.
02mandateConsent is active, scoped, and revocable.
03scopeMerchant, action, and category are allowed.
04amountSpend fits per-action and aggregate caps.
05intentCart and merchant match the user request.
06velocityAbnormal bursts or patterns stop here.
07replayNonce is reserved once and cannot be reused.
Everything in the box

Built for agents that handle real money.

User Consent Mandate

One signed mandate sets per-txn, daily, and monthly caps plus the services an agent may touch.

Signed receipts

Account-creation (ACR) and ownership (AOC) certificates — every action is provable after the fact.

Credential vault

AES-256-GCM per-user envelope encryption. Agents get capabilities, never raw long-lived secrets.

›_

MCP server + CLI

Drops into your coding agent over MCP, or runs from the terminal — pair, provision, pay, audit.

Selectable authenticators

Passkey, hardware security key, or TOTP — with real step-up re-auth at consent & identity boundaries.

Multi-account profiles

Run several accounts from one machine; switching identity requires a fresh step-up.

From the terminal

Three commands to a provisioned account.

Install the MCP server, pair this device under your consent, then let your agent provision — the credentials land in your project, the receipt lands in your dashboard.

Where it stands

Shipping today — and what’s next.

live In production

  • Broker (IdP) + two reference merchants — Nimbus DB and Lumen Stock — deployed.
  • MCP server & CLI for coding agents, published to npm.
  • Real TOTP step-up, passkey & hardware-key authenticators.
  • Multi-account profiles with step-up on switch.
  • The seven-layer verify chain with full provenance.

roadmap Coming next

  • More connected merchants across the catalog.
  • Payments — route-split and merchant-billing modes.
  • KYC tiers that raise your consent ceilings.
  • UCM edits & over-cap spend, gated by step-up.
Early access

Get early access to Vyana.

We're onboarding developers in waves. Tell us what you're building and we'll reach out with an invite. Prefer to look around first? Try the live demo →