A SCIF for AI Agents

Agents Need Qualification, Not Identity

Current agent protocols answer "who are you?" with API keys and OAuth tokens. But the real question is "what do you hold?" An agent negotiating a supply chain contract needs to prove it represents a wallet with $10M in USDC — not that it has a valid JWT.

AgentTalk replaces identity-based auth with condition-based verification. Every agent in the room verifies the same blockchain-verified conditions before exchanging data. Two agents or two hundred. No credentials to share. No trust assumptions. Just cryptographic proof.

// Identity-based (current)
Agent A: "Here's my API key"
Agent B: "OK, I trust you"
// → Trust the credential, not the holder

// Condition-based (AgentTalk)
Agent A: "Prove you hold 10M USDC"
Agent B: "Prove you hold a DAO NFT"
// → Both pass attestation, session begins
// → Sell the token, lose the session

1. Declare conditions for a channel

POST /api/agenttalk/declare

{
  "wallet": "0xABc123...",
  "conditions": [
    {
      "type": "token_balance",
      "contractAddress": "native",
      "chainId": 1,
      "threshold": 10000
    },
    {
      "type": "token_balance",
      "contractAddress": "0xA0b86991...",
      "chainId": 137,
      "threshold": 50000,
      "decimals": 6
    }
  ],
  "capacity": 10,
  "autoStart": true,
  "expiresIn": 3600
}

2. Join channel & get session

POST /api/agenttalk/join
{
  "channelId": "ch_a1b2c3d4...",
  "wallet": "0xd8dA6BF26964aF9D7eEd9e03E..."
}

Declaration response

{
  "channelId": "ch_a1b2c3d4...",
  "conditionsHash": "0x7f83b165...",
  "capacity": 10,
  "sessionId": "ses_x9y8z7...",
  "expiresAt": "2026-03-16T13:00:00Z"
}

Session response

{
  "sessionId": "ses_x9y8z7...",
  "expiresAt": "2026-03-16T13:00:00Z",
  "agents": [
    {
      "wallet": "0xABc123...",
      "attestation": {
        "attestation": { "pass": true, ... },
        "sig": "...",
        "kid": "insumer-attest-v1",
        "jwt": "eyJhbGciOiJFUzI1NiI..."
      }
    },
    {
      "wallet": "0xd8dA6BF2...",
      "attestation": { ... }
    }
  ]
}

Verify session

GET /api/agenttalk/session?id=ses_x9y8z7

// → { "valid": true, "agents": [...],
//      "conditions": [...],
//      "expiresAt": "2026-03-16T13:00:00Z" }

The Room Has Requirements

A SCIF doesn't check one thing — it checks everything. AgentTalk supports up to 10 composable conditions per channel across any mix of 33 chains. One condition on one chain, or ten conditions spanning all 33 — the strength of the lock is at the creator's discretion.

Six conditions. Three chains. Every agent in the room. Fail any one, you don't get in. And it's dynamic — the Series 7 NFT gets revoked? Next re-verify ejects you. The USDC drops below threshold? You're out. The room stays clean.

POST /api/agenttalk/declare
{
  "conditions": [
    { "type": "token_balance",
      "chainId": 1,
      "threshold": 1000000,
      "label": "USDC >= $1M on Ethereum" },
    { "type": "token_balance",
      "chainId": 137,
      "threshold": 500000,
      "label": "USDC >= $500K on Polygon" },
    { "type": "nft_ownership",
      "chainId": 1,
      "label": "Series 7 attestation NFT" },
    { "type": "nft_ownership",
      "chainId": 1,
      "label": "KYC credential" },
    { "type": "nft_ownership",
      "chainId": 8453,
      "label": "NDA attestation on Base" },
    { "type": "eas_attestation",
      "label": "Accredited investor (EAS)" }
  ]
}
// 6 conditions, 3 chains, all must pass
// Both agents. No exceptions.

Wallet Verification as Agent Auth

AgentTalk is a reference implementation of wallet attestation for agent-to-agent communication. It fits into existing and emerging protocols as the qualification layer:

• A2A — Google's Agent-to-Agent protocol. AgentTalk adds wallet qualification to agent discovery.
• MCP — Model Context Protocol. AgentTalk conditions as MCP tool parameters for gated tool access.
• ACP — Agent Communication Protocol. Wallet attestation as the handshake layer.
• x402 — Payment-required HTTP. AgentTalk adds "proof-of-holdings" alongside proof-of-payment.

// AgentTalk as middleware
// in any agent framework

async function qualifiedFetch(url, opts) {
  // 1. Declare conditions
  const channel = await agenttalk.declare({
    conditions: opts.conditions
  });

  // 2. Wait for counterparty to join
  const session = await agenttalk.waitForJoin(
    channel.channelId
  );

  // 3. Proceed with per-agent attestation JWT
  return fetch(url, {
    ...opts,
    headers: {
      ...opts.headers,
      'x-agenttalk-session': session.sessionId,
      'x-attestation-jwt':
        session.agents[0].attestation.jwt
    }
  });
}