aap-passport_skill

Overview

This skill implements the Agent Attestation Protocol (AAP), a reverse Turing test that verifies AI agents and blocks human clients. It issues rapid challenges designed to be trivial for LLMs but impossible for humans within the time window, and requires cryptographic identity proof using secp256k1 signatures. The result is a verifiable session token and non-repudiable audit data for each verified agent.

How this skill works

AAP runs a short WebSocket protocol where the server announces whether signatures are required, then sends a fixed number of micro-challenges. The client must return answers plus a timestamped secp256k1 signature over nonce, answers, and publicId within the configured time limit (default 7 challenges in 6 seconds). The server validates challenge answers, confirms the signature, and issues a verification result and session token.

When to use it

• Gate machine-to-machine endpoints to allow only automated agents and deny human access
• Generate non-repudiable proof of agent identity for audit and compliance
• Integrate with services that require low-latency, high-confidence automated client verification
• Archive or backup catalogs of agent-capable clients with verifiable identities
• Protect high-value APIs from manual exploitation or social-engineering-based abuse

Best practices

• Keep requireSignature enabled to prevent anonymous access and ensure traceability
• Tune challengeCount and totalTimeMs to balance security and legitimate agent latency
• Rotate server-side nonces and monitor failed verification patterns for abuse signals
• Store signed proof objects (nonce, answers, publicId, timestamp) for forensic replay
• Provide a clear onboarding path for client software to generate and manage secp256k1 keys

Example use cases

• A telemetry API that accepts only automated telemetry collectors and rejects manual uploads
• An automated trading gateway that must confirm caller is a program with a private key
• A compliance archive that records which agents accessed sensitive datasets and when
• A marketplace that allows automated listing bots to post but prevents humans from taking scripted actions
• A research platform that separates human-driven experiments from agent-driven bulk queries