OMP/1 — Open Mandate Protocol · English overview
Was this agent authorized to do that —
and who can prove it?
Mandact is European infrastructure for verifiable, revocable, legally grounded mandates for AI agents. Payment rails (AP2, Visa, Mastercard, Stripe) answer whether an agent can pay. Enterprise IAM (Okta, Entra) answers which internal agents exist. Mandact answers the question in between — the one that decides liability.
Beyond payments
27 action types across 9 domains — cancellations, bookings, data sharing, procurement, government filings. Payment mandates (AP2) are wrapped as a subtype, not the whole story.
State-anchored identity
Built on the Swiss E-ID and EUDI wallet stack (SD-JWT, OID4VCI/VP): the principal behind every mandate is a state-verified legal person, not an account.
Legally grounded
Every mandate binds a reviewed legal text (Swiss CO Art. 32 et seq., German BGB §164 et seq.) by hash. Contract signing is deliberately excluded — final signatures stay human.
Court-grade evidence
Append-only, hash-chained evidence enforced at the database level, with a path to qualified timestamps (eIDAS Art. 41). Both sides can export the proof.
How it works
1
Issue
A person or company grants a mandate in under 3 minutes: scope, limits, duration — always revocable.
2
Verify
Any accepting party checks identity, scope and live status in one call, < 150 ms, with a signed receipt. 19 stable decision codes.
3
Prove
Every decision lands in the evidence chain. In a dispute, the receipt answers — for both sides.
Why now: December 1, 2026
Switzerland launches its state E-ID (Swiyu) on December 1, 2026 — ahead of nearly every EU member state, on exactly the technology stack the Open Mandate Protocol uses. The EUDI wallet deadline follows on December 24, 2026. Whoever demonstrates state-anchored agent mandates first defines the reference architecture for a continent. The German-language site covers the full depth: knowledge hub, legal profiles (CH/DE/AT), feature matrix.