Know Your Agent · Switzerland
Know Your Agent: who is the agent, what may it do — and where is the proof?
Your agent presents a passport and a mandate; your verifier checks both — in your own house or at a third party, without prior arrangement. Before every critical action it asks: «may I?» Mandact answers in milliseconds — by rules the agent never sees and can never change. Every answer enters the hash-chained evidence log, where later alterations are cryptographically detectable.
Finn (Rechnungs-Agent) → Mandact
«Darf ich CHF 2'340 an Holzhandel Suter GmbH zahlen?»
Die Regeln kennt Finn nie — sie fragt nur. Sandra ändert Limits im Dashboard, sofort wirksam.
- scope
- payment.execute
- amount
- CHF 500.00
receipt sha256 3f9a2c…e71b · omp/1
- eIDAS
- W3C VC
- OID4VC
- AP2
- EU-Hosting
The category
Whoever operates agents must answer three questions. Nobody else answers the third.
01
Who is the agent? — the agent passport (omp/agent/1)
02
Who authorised it? — the principal with an assurance level (UID/commercial register, later E-ID)
03
May it do this now — and where is the proof? — the mandate, the verification, the evidence chain
Our answer
Four questions, four credentials, one decision point: the passport says who the agent is; the principal's assurance level, who authorised it; the mandate, what it may do; the verification with its evidence chain, whether it may do it now — and that it did. Every answer can be checked without Mandact.
Action catalogue
An agent may not carry out every action.
A commercial lease termination without the required form is void — not voidable, but without effect from the outset. Other actions are reserved to natural persons. An agent cannot perform them.
- 123
- Action types
- 17 domains, four jurisdictions
- 70
- Agent acts alone
- no form required, no mandatory channel
- 49
- Human must sign
- form requirement, channel, or criminal liability
- 4
- No agent, ever
- notarial deed or professional reservation
8 types run through a mandatory state channel — goAML, SdI, the German BSI reporting portal. 4 carry a statutory deadline, from 24 hours under NIS2 to 72 for a data breach. That is exactly why «no form required» does not mean «unbounded».
Try it yourself
Three clicks to proof.
Issue, verify, revoke a mandate — against the real engine, without an account and without a database.
OMP/1 — Live-Demo · echte Sandbox, kein Mock
Understood in ten seconds
What you trigger on the left is the real engine, not a mock-up: deterministic checking, signed receipt, revocation with no grace period. The same endpoints your verifier calls.
Three steps
Issue. Verify. Prove.
OMP/1 — ISSUE
Issue a mandate
A person or organisation defines in minutes what an agent may do — scope, limit, validity — and signs with their state-backed identity.
OMP/1 — VERIFY
Check before the action
The verifier verifies the presented mandate with one API call: allow, deny or escalate — with a machine-readable reason and a signed receipt.
OMP/1 — PROVE
Prove it later
Every decision lands in a hash-chained evidence log: who allowed what, when, on which basis — verifiable years later.
Der Durchlauf · Ende zu Ende
Von der Absicht bis zum Beweis — in einem Bild.
Erlaubt — der Agent handelt, und ein signierter Beleg bleibt. Das Zielsystem meldet zurück, was es tatsächlich ausgeführt hat.
Schematische Darstellung des Ablaufs. Die tatsächliche Prüfung läuft in der Engine — unter «Beleg prüfen» können Sie das Ergebnis selbst nachrechnen.
For developers
Verify in five lines.
One request checks the signature chain, live status, scope, and limits — one answer, one signed receipt. Sandbox without sign-up, 10,000 live verifications per month, free.
import { Mandact } from "@mandact/sdk";
const mandact = new Mandact(process.env.MANDACT_KEY);
const result = await mandact.verify({
presentation: req.headers["x-mandate-presentation"],
action: { type: "subscription.cancel", counterparty: "your-org" },
});
if (result.decision === "allow") proceed(result.receipt);Two doors
For operators of AI agents
Prove what your agents were allowed to do.
Whoever operates agents is liable for their actions — and is therefore its own verifier. For every action Mandact answers the four KYA questions: who, under whose authority, what, and whether it was allowed right now. A signed receipt your auditors recompute without us. No third party has to integrate.
For principals
Give your agents clear authority.
Free forever for individuals. Organisations with roles, four-eyes signing, and audit export.
Go deeper
The full layer architecture, the product scope and the action catalogue each have their own page — with room for the detail, instead of being skimmed past here.