Know Your Agent · Switzerland
Know Your Agent: who is the agent, what may it do — and where is the proof?
Your agent presents a passport and a mandate; the relying party verifies both without prior arrangement. Before every critical action it asks: «may I?» Mandact answers in milliseconds — by rules the agent never sees and can never change. Every answer enters the hash-chained evidence log, where later alterations are cryptographically detectable.
Finn (Rechnungs-Agent) → Mandact
«Darf ich CHF 2'340 an Holzhandel Suter GmbH zahlen?»
Die Regeln kennt Finn nie — sie fragt nur. Sandra ändert Limits im Dashboard, sofort wirksam.
- scope
- payment.execute
- amount
- CHF 500.00
receipt sha256 3f9a2c…e71b · omp/1
- eIDAS
- W3C VC
- OID4VC
- AP2
- EU-Hosting
The category
A relying party asks three questions. Nobody else answers the third.
01
Who is the agent? — the agent passport (omp/agent/1)
02
Who authorised it? — the principal with an assurance level (UID/commercial register, later E-ID)
03
May it do this now — and where is the proof? — the mandate, the verification, the evidence chain
Our answer
Four questions, four credentials, one decision point: the passport says who the agent is; the principal's assurance level, who authorised it; the mandate, what it may do; the verification with its evidence chain, whether it may do it now — and that it did. Every answer can be checked without Mandact.
Action catalogue
An agent may not carry out every action.
A commercial lease termination without the required form is void — not voidable, but without effect from the outset. Other actions are reserved to natural persons. An agent cannot perform them.
- 123
- Action types
- 17 domains, four jurisdictions
- 70
- Agent acts alone
- no form required, no mandatory channel
- 49
- Human must sign
- form requirement, channel, or criminal liability
- 4
- No agent, ever
- notarial deed or professional reservation
8 types run through a mandatory state channel — goAML, SdI, the German BSI reporting portal. 4 carry a statutory deadline, from 24 hours under NIS2 to 72 for a data breach. That is exactly why «no form required» does not mean «unbounded».
Try it yourself
Three clicks to proof.
Issue, verify, revoke a mandate — against the real engine, without an account and without a database.
OMP/1 — Live-Demo · echte Sandbox, kein Mock
Understood in ten seconds
What you trigger on the left is the real engine, not a mock-up: deterministic checking, signed receipt, revocation with no grace period. The same endpoints a relying party calls.
Three steps
Issue. Verify. Prove.
OMP/1 — ISSUE
Issue a mandate
A person or organisation defines in minutes what an agent may do — scope, limit, validity — and signs with their state-backed identity.
OMP/1 — VERIFY
Check before the action
The relying party verifies the presented mandate with one API call: allow, deny or escalate — with a machine-readable reason and a signed receipt.
OMP/1 — PROVE
Prove it later
Every decision lands in a hash-chained evidence log: who allowed what, when, on which basis — verifiable years later.
Der Durchlauf · Ende zu Ende
Von der Absicht bis zum Beweis — in einem Bild.
Erlaubt — der Agent handelt, und ein signierter Beleg bleibt. Das Zielsystem meldet zurück, was es tatsächlich ausgeführt hat.
Schematische Darstellung des Ablaufs. Die tatsächliche Prüfung läuft in der Engine — unter «Beleg prüfen» können Sie das Ergebnis selbst nachrechnen.
For developers
Verify in five lines.
One request checks the signature chain, live status, scope, and limits — one answer, one signed receipt. Sandbox without sign-up, 10,000 live verifications per month, free.
import { Mandact } from "@mandact/sdk";
const mandact = new Mandact(process.env.MANDACT_KEY);
const result = await mandact.verify({
presentation: req.headers["x-mandate-presentation"],
action: { type: "subscription.cancel", counterparty: "your-org" },
});
if (result.decision === "allow") proceed(result.receipt);Two doors
For principals
Give your agents clear authority.
Free forever for individuals. Organisations with roles, four-eyes signing, and audit export.
For relying parties
Accept agent revenue — without the risk.
Deterministic answers, unambiguous denial codes — independently checkable, exportable for audit and disputes. First verification in under ten minutes.
Go deeper
The full layer architecture, the product scope and the action catalogue each have their own page — with room for the detail, instead of being skimmed past here.