“My agent did it” — answered deterministically.
Your platform lets agents act. Manav adds the layer none of the agent standards own: a live human signs one scoped, time-bound, revocable delegation; the agent signs each action under it; the chain verifies back to the human’s passkey — offline, by anyone.
The receipt below was signed and checked in this tab, with zero network calls.
Cryptographic fields
non-human identities per human employee, median enterprise — up from 17:1 in 2023.
of organizations found an agent that security and IT didn’t know existed.
OAuth scopes bound what the agent may access. AP2 mandates carry payment intent. Web Bot Auth signs the request. Each proves something real — and none proves a live human authorized the scope. An authorized agent and a hijacked one emit identical traffic; the dispute that breaks agentic commerce is “my agent did it,” and today no artifact answers it across vendors.
Three integration points. Your brand, our receipt.
// Before the consequential action, from your backend: const receipt = await manav.sign({ action: 'agent.purchase', payload: { cartHash, merchant }, delegation: delegationToken, assurance: 'chain→passkey', }); if (receipt.ceremony === 'completed') proceed(receipt.id); // Anyone verifies the receipt offline against our published JWKS — forever.
Run the ceremony yourself. Then try to fake it.
A controlled sandbox of the exact flow above — your system asks, the enrolled human signs on their own device, a receipt is issued, and you attack it. Real Ed25519, in this tab, nothing sent anywhere.
A 30-minute integration conversation.
Bring the flow in your product where this belongs. We’ll run the ceremony on it and hand you a receipt you can verify yourself before the call ends — and a straight answer on what an embed looks like commercially.