Authorize provides the Ratify Protocol, a peer‑verifiable cryptographic delegation system that lets any party confirm offline, in under a millisecond, that an AI agent has a valid, signed authorization from a designated human or principal.
Funding
Funding not disclosed
Founders
Product
Problem
AI agents routinely act on behalf of users—making calls, sending messages, executing transactions—but they can only claim they are authorized, with no cryptographic proof that a specific human or principal granted that permission.
Solution
Authorize offers the Ratify Protocol, a peer‑verifiable cryptographic delegation system that lets any party confirm, offline and in under a millisecond, that an AI agent carries a valid, signed authorization from a designated human or another agent. The protocol uses hybrid signatures (Ed25519 + ML‑DSA‑65) to provide post‑quantum security and supports voice, video, API, and physical AI channels through a JSON‑based proof bundle. Verification requires only the principal’s public key—no vendor, policy server, or blockchain is needed—allowing recipients to validate the agent’s scope, expiration, and revocation status locally. An open‑source SDK (Go, TypeScript, Python, Rust, C/C++) enables developers to embed Ratify into their agents, while Identities AI offers a managed “Ratify Verify” control plane for enterprise revocation, audit, and policy integration.
Target Audience
Primary customers are enterprise security and IT teams that need to authorize AI agents under compliance regimes, and AI platform developers who require verifiable delegation for agents operating across voice, video, API, and physical environments.
Features
- Hybrid Ed25519 + ML‑DSA‑65 signatures delivering post‑quantum security
- Offline verification in < 1 ms with no network call or third‑party service
- Channel‑agnostic proof bundles usable for voice, video, API, and embodied (Physical AI) interactions
- Open‑source SDKs across major languages (Go, TypeScript, Python, Rust, C/C++) under Apache‑2.0
- Built‑in revocation lists and challenge‑response replay protection
- Extensible hooks for policy enforcement, audit logging, and anchor resolution
- Free forever access to the core protocol and SDKs; optional managed Ratify Verify service for enterprise scale