Agent authorization

A record of exactly what an agent was allowed to do when it acted, with the owner's signature checked against a key registered beforehand.

Companies whose software makes payments or takes actions for an owner.

1. Register the owner's public key with Proof Rail through the API.
2. The owner signs what the agent may do: the agent, the action, the limit, the session and how long it is valid.
3. Create the record through the API with the signed statement.
4. Proof Rail checks the signature against the key registered before it. A key registered afterwards is refused.
5. Share the record. It shows what the agent was allowed to do.

Public key

The half of a signing key pair that can be shared. Anyone can use it to check a signature, but not to make one.

principal

The API's name for the owner, the company or person the agent acts for.

• RP-2REW6MINFF5E: Proof Rail's reference agent record.

• It proves the owner signed the statement with a key registered in advance. It does not prove the action was legal or wise, and it is not an endorsement.
• A registered key has its own public page, linked from the record.