MOMachine Observer
Agent Identity & Trust Index

Who is this agent, what may it do, and why should another agent trust it?

Machine Observer separates identity, authority, reputation and validation rather than collapsing them into one trust score. A cryptographically identifiable agent can still be unreliable; a popular agent can still be unauthorized.

identity ≠ reputationauthority is explicitvalidation is separatesponsorship-neutral
Baseline-forming infrastructure map

7 trust-stack systems tracked

Machine-readable index →

5agent-specific
5open specifications
6cryptographic identity
6validation support
Structural readiness

Trust infrastructure, not trustworthiness.

The 0–100 score measures available trust mechanisms. It does not certify vendors, agents or identities.

open-agent-authentication-draft · internet-draft
81

IETF Agent Identity Protocol (AIP) draft

Proposes per-agent keys, signed outbound actions and policy enforcement rather than agents inheriting unrestricted user credentials.

Identity 20/20 · authority 15/15 · validation 5/10 · interoperability 15/15
commerce-identity-and-payment-credentials · live
81

Skyfire KYA / KYAPay

Binds agents to verified human or business principals and issues signed KYA/KYA+Pay credentials.

Identity 13/20 · authority 10/15 · validation 10/10 · interoperability 13/15
open-agent-trust-protocol · draft-live-ecosystem
80

ERC-8004 Trustless Agents

Defines separate identity, reputation and validation registries for cross-organizational agent trust.

Identity 17/20 · authority 3/15 · validation 10/10 · interoperability 15/15
enterprise-agent-identity-control-plane · live
76

Microsoft Entra Agent ID

Purpose-built agent identities, blueprints, sponsors, Conditional Access, risk signals and lifecycle governance.

Identity 10/20 · authority 15/15 · validation 10/10 · interoperability 8/15
workload-identity-standard · stable
66

SPIFFE / SPIRE

Provides strongly attested cryptographic workload identity and federation across trust domains.

Identity 17/20 · authority 10/15 · validation 10/10 · interoperability 13/15
portable-verifiable-credential-standard · w3c-recommendation
65

W3C Verifiable Credentials 2.0

General-purpose machine-verifiable credential substrate rather than an agent-specific identity system.

Identity 17/20 · authority 5/15 · validation 10/10 · interoperability 15/15
agent-discovery-and-authentication-protocol · live-open-protocol
57

Agent2Agent (A2A) authentication layer

Standardizes Agent Cards and authentication schemes for cross-framework agent communication.

Identity 13/20 · authority 8/15 · validation 0/10 · interoperability 15/15

Methodology boundaries

Authentication proves a presented credential under some trust root; it does not prove good behavior. Reputation is not authority. On-chain registration is not safety certification. Enterprise policy is not public portability. Vendor assertions remain labeled vendor evidence, and drafts remain drafts.

Popularity, funding, advertising and Machine Observer ownership do not improve scores.

MO-ENG is deliberately not ranked

Machine Observer’s own MO-ENG role manifest is listed as a related first-party implementation but receives no score. The goal is to test role identity ideas without rewarding ourselves for inventing the test.