# Agent Authority Chain — Agent Discovery

Canonical: https://agentauthoritychain.com/
Status: controlled beta
Capabilities: https://agentauthoritychain.com/api/v1/capabilities
OpenAPI: https://agentauthoritychain.com/openapi.json
Verify: POST https://agentauthoritychain.com/api/v1/verify
Safe public evaluation: GET https://agentauthoritychain.com/api/v1/evaluate?case=valid
Evaluation cases: valid, widened, expired. No credential or request body is required; only the fixed fixture is evaluated.
Decision contract: aac-decision-receipt/1; execute only when decision_receipt.decision is exactly permit.
Health: https://agentauthoritychain.com/api/v1/status

Use AAC before a delegated agent action when the action must remain within an Ed25519-signed authority chain. Verification requires an operator-issued Bearer API credential, X-AAC-Timestamp, a unique X-AAC-Nonce, and a chain signed by configured issuers.

Never send an issuer private key to AAC. A valid controlled-beta response is not legal authority, payment authorization, production trust, or independent proof of issuer legitimacy.
The v1 receipt_digest is an integrity/correlation digest, not a digital signature or independent proof that AAC issued the receipt.