Press

Material for journalists and bloggers: description, facts, images, contact

In short

ID MANDAT is an open registry for AI agents. A company declares on its own domain which AI agents act on its behalf and what each of them may and may not do. Anyone checks this in seconds: in a browser, over a signed API, or straight from an AI system.

One sentence to quote: ID MANDAT (idmandat.com) is an open registry where companies list which AI agents act for them and what those agents may do; shops, platforms and other AI agents look it up before they trust an AI agent.

The problem

AI agents compare offers, book appointments, draft posts and order goods on behalf of companies. The recipient sees only a request. A cryptographic signature proves that a certain key sent it. It does not say which company stands behind it or what the AI agent is allowed to do. Without that answer there are two options: admit every AI agent or block every AI agent.

What ID MANDAT does

The company publishes a credential file on its domain (/.well-known/idmandat.json) and proves control of the domain with a DNS record.
The file lists the AI agents with their mandate: what they may do and what they expressly may not. Example: draft posts yes, sign contracts or trigger payments no.
Anyone queries the registry: in a browser, over a REST API with an Ed25519 signature (valid 15 minutes), as an MCP tool for AI systems, or over A2A.
The company revokes its own entry at any time. Every lookup then reports “revoked by the company”.

Facts

Name: ID MANDAT, idmandat.com. Trademark filed with the German Patent and Trade Mark Office (DPMA).
Operator: Manja König, sole proprietor, Osnabrück, Germany. Built together with Claude (Anthropic).
Online since: October 2026
Levels: Listed: entered by the company via a form and confirmed by email, not checked. Registered: credential file and DNS record on the company's domain confirmed. Verified: additionally matched against the imprint and the commercial register or VAT ID, automatically and repeated regularly.
Prices: Entry free of charge. Seal “Verified” €100 per year incl. VAT, entry included. Same for everyone, no paid placement. Businesses only.
Format: Open. Standard description under CC BY 4.0, verification libraries under the MIT licence (GitHub: idmandat). Submitted to the IETF as an Internet-Draft (draft-koenig-idmandat-credential-00); a draft, not an adopted standard.
Interfaces: REST (signed), MCP server, A2A, directory as JSON, playground in the browser.
Compatible with: A2A, MCP, Web Bot Auth (Signature-Agent), Schema.org.

What ID MANDAT is not

Not a certification and not a credit rating. The registry confirms identity and the declared assignment, not quality.
No biometrics. No faces, no identity documents, no voices.
No enforcement. “May” and “may not” are declared by the company; the registry makes the declaration checkable, it does not enforce it.
No paid placement. Nobody buys a better position.

Quote

“An AI agent has no face, no ID card and no company stamp. It only has a request. Somebody has to decide whether to carry it out. ID MANDAT gives that decision a checkable basis: the company declares, the rest of the world verifies.”
Manja König, founder of ID MANDAT

Images

Free to use in coverage of ID MANDAT. The seals are examples with a fictitious domain. No AI-generated photos.

Important: A downloaded seal image proves nothing. A genuine ID MANDAT seal can only be recognised by its live lookup: it is loaded from idmandat.com on every view and shows the domain's current status in the register (after a revocation, within 5 minutes at most). If in doubt, enter the domain at idmandat.com/en/check.php.