mlsanityData to 7 Oct 2026

AI Agents with Decentralized Identifiers and Verifiable Credentials

arXiv 2511.02841 ↗First posted 1 Oct 2025cs.CR cs.MAcited by 17

On the map: LLM agents and tool use → Agent threats, guardrails and governance

Abstract (arXiv)

A fundamental limitation of current LLM-based AI agents is their inability to build differentiated trust among each other at the onset of an agent-to-agent dialogue. However, autonomous and interoperable trust establishment becomes essential once agents start to operate beyond isolated environments and engage in dialogues across individual or organizational boundaries. A promising way to fill this gap in Agentic AI is to equip agents with long-lived digital identities and introduce tamper-proof and flexible identity-bound attestations of agents, provisioned by commonly trusted third parties and designed for cross-domain verifiability. This article presents a conceptual framework and a prototypical multi-agent system, where each agent is endowed with a self-sovereign digital identity. It combines a unique and ledger-anchored W3C Decentralized Identifier (DID) of an agent with a set of third-party issued W3C Verifiable Credentials (VCs). This enables agents at the start of a dialog to prove ownership of their self-controlled DIDs for authentication purposes and to establish various cross-domain trust relationships through the spontaneous exchange of their self-hosted DID-bound VCs. A comprehensive evaluation of the prototypical implementation demonstrates technical feasibility but also reveals limitations once an agent's LLM is in sole charge to control the respective security procedures.

Key facts. Cited by 17 papers in the map (data through 7 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 13 of its 18 references that are in the map. First posted on arXiv 1 Oct 2025.

Builds on

13 of 18 references.

Closest ancestors · 5

Same direction, newest first

  1. 2025BlockA2A: Towards Secure and Verifiable Agent-to-Agent Interoperability2 Aug
  2. 2025A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasures24 Jun
  3. 2025TRiSM for Agentic AI: A Review of Trust, Risk, and Security Management in LLM-based Agentic Multi-Agent Systems4 Jun
  4. 2025Seven Security Challenges in Cross-domain Multi-agent LLM Systems28 May
  5. 2025A Novel Zero-Trust Identity Framework for Agentic AI: Decentralized Authentication and Fine-Grained Access Control25 May

Other references · 8

  1. 2025Open Challenges in Multi-Agent Security: Towards Secure Systems of Interacting AI Agentscited by 66
  2. 2025Authenticated Delegation and Authorized AI Agentscited by 63
  3. 2025Agent Network Protocol Technical White Papercited by 24
  4. 2025Beyond DNS: Unlocking the Internet of AI Agents via the NANDA Index and Verified AgentFactscited by 20
  5. 2025LOKA Protocol: A Decentralized Framework for Trustworthy and Ethical AI Agent Ecosystemscited by 15
  6. 2025Position: Collaborative Agentic AI Needs Interoperability Across Ecosystemscited by 7
  7. 2025Towards Multi-Agent Economies: Enhancing the A2A Protocol with Ledger-Anchored Identities and x402 Micropayments for AI Agentscited by 5
  8. 2025Governance of Ledger-Anchored Decentralized Identifierscited by 1

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 17.

17 papers.

Sort:

By area:

  1. 2026Dissociative Identity: Language Model Agents Lack Grounding for Reputation Mechanismscited by 3
  2. 2026Heartbeat-Bound Hierarchical Credentials: Cryptographic Revocation for AI Agent Swarmscited by 2
  3. 2026Trust Without Trusting: A Recomputable Trust Protocol for Autonomous Agentscited by 1
  4. 2026The Internet of Agentic AI: Communication, Coordination, and Collective Intelligence at Scalecited by 1
  5. 2026Infrastructure for the Agentic Web: Gap Analysis and Architecture from the Agentverse Platformcited by 1
  6. 2026SoK: When Safe Agents Fail Together: The Security of Multi Agent LLM Systemscited by 1
  7. 2026SoulAuth: An Actor-native Identity Architecture and Rust Reference Implementation for Humans and Long-lived AI Actorscited by 1
  8. 2026Distributed Legal Infrastructure for a Trustworthy Agentic Webcited by 0
  9. 2026SS-ZKR: Spatial-Semantic Zero-Knowledge Routing for Privacy-Preserving Multi-Agent Collaborationcited by 0
  10. 2026Soul Computing: A Theoretical Framework and Technical Architecture for Intelligent Agents with Independent Consciousnesscited by 0
  11. 2026InterSAGE: The Secure and Verifiable Interoperability Protocol for An Internet of Agentscited by 0
  12. 2026The Civilization Framework: Sovereign-Anchored Communication Between Personal Multi-Agent Systemscited by 0
5 more
  1. 2026LEGIT: Credentialing Protocol for Trustworthy AI Agent Marketplacescited by 0
  2. 2026NostrAgent: A Decentralized Identity and Delegation Architecture for Sovereign Agentic Systemscited by 0
  3. 2026When the Agent Becomes the Kernel: A Systematization of Security on the Path to AI-Native Operating Systemscited by 0
  4. 2026Trust the Brand, Lose Control: How Identity Hijacks LLM Agent Orchestrationcited by 0
  5. 2026PANDA: A Decentralized Architecture with Flexible Orchestration for Scalable, Fault-Tolerant Multi-Agent Systemscited by 0

Similar, not cited

Close in wording, no citation either way

  1. 2025From Cloud-Native to Trust-Native: A Protocol for Verifiable Multi-Agent Systems
  2. 2025Inter-Agent Trust Models: A Comparative Study of Brief, Claim, Proof, Stake, Reputation and Constraint in Agentic Web Protocol Design-A2A, AP2, ERC-8004, and Beyond
  3. 2026Verifiable Agentic Infrastructure: Proof-Derived Authorization for Sovereign AI Systems
  4. 2026AIP: Agent Identity Protocol for Verifiable Delegation Across MCP and A2A
  5. 2026Blockchain Empowered Trustworthy Agent Networks: Foundations, Taxonomy, and Future Directions
  6. 2026Delegation Without Trust: An Empirical Gap Analysis of Identity, Authorization, and Runtime Governance in Multi-Agent LLM Systems
  7. 2025Trusted AI Agents in the Cloud
  8. 2025VET Your Agent: Towards Host-Independent Autonomy via Verifiable Execution Traces