Introducing AG9 by VeryAI: A New Standard for AI Agent Identity

AG9 is the KYA standard for human-approved agents—using palm biometrics to make every interaction instantly trustworthy

Miami, Florida – WEBWIRE – Wednesday, May 6, 2026

VeryAI, the company creating the identity layer for AI safety, today announced the launch of AG9, a platform designed to solve one of the most pressing infrastructure challenges of the AI era: how to identify, authenticate, and trust AI agents operating autonomously across the web.

As AI agents increasingly browse, transact, and interact on behalf of humans, the identity verification frameworks built for human users are breaking down. Existing tools like CAPTCHA and cloudflare were designed with humans in mind and are failing to distinguish legitimate agents from malicious bots. Today, a single actor can deploy thousands of autonomous agents with no guardrails or a way for platforms to verify who or what is behind them. Financial institutions have long relied on Know Your Customer (KYC) standards to verify who they’re doing business with, but no equivalent exists for AI agents.

The consequences are real. Credentials leak, cookies get shared, and downstream systems can’t tell a legitimate agent from a bad bot, so they block both or let both through. The root cause is the same: there is no standard that confirms a given agent is authorized by and traceable back to a real, consenting human before it is permitted to act on their behalf. It’s time for a Know Your Agent (KYA) standard that gives agents identity, credentials, and permissions so they can operate and be trusted.

What is AG9?

AG9 introduces a KYA standard rooted in palm biometric verification that proves a real person owns and authorizes that agent. Under AG9, a human scans their palm through VeryAI, and their agent is now cryptographically bound to a real, verified person. This combats anonymous agent deployment and Sybil attacks at the root, creating an unbreakable chain of accountability from agent action back to the human owner, even as the agent moves across vendors, services and enterprises. Any platform can then query in real time whether an agent is owned by a verified human, with a response subsecond.

“KYC answers the question ’who is this user?’ That’s no longer enough. A single person can now deploy thousands of agents acting, transacting, and interacting autonomously with zero accountability. The question that platforms need to answer is, ‘Who or what is acting right now, and where does the responsibility lie?’ KYC wasn’t built to answer that. AG9 is,” said Zach Meltzer, Founder & CEO of VeryAI.

A Platform for Agent Trust

Agent Registration & Credentialing: With a VeryAI palm scan, agents are registered with a declared identity, owner context, and permitted behavior scope. Upon registration, each agent receives a signed cryptographic credential compatible with leading identity standards. It integrates across existing infrastructure: Cloudflare Web Bot Auth, A2A v1.0 Signed Agent Cards, ERC-8004 registries, and Auth0 / Entra OBO tokens. This credential is the agent’s passport.

How It Works:

There are three easy steps to using AG9:

Partners integrate AG9: A partner, like a wallet, an edge network, an agent platform, adds AG9 as a single verification check alongside whatever they already run. One integration on their side.
Users link their agents. The user opens the VeryAI app, scans the agent’s pairing QR, reviews what the agent is authorized to do, and scans their palm to confirm. The agent is now cryptographically bound to that human.
Users approve actions in real time: When an agent attempts something sensitive, like a payment, a publish or a transfer, the partner pings AG9. The user receives a push notification to approve the action with a palm scan.

Who It’s For?

AG9 is designed for any organization that needs to know exactly who and what is operating on their platform. Today, millions of websites rely on tools like CAPTCHA and bot detection to distinguish humans from automated traffic. Automated activity already represents the majority of the internet: in 2024, 51% of internet traffic came from bots, with malicious bots accounting for 37%, according to the 2025 Imperva Bad Bot Report. At the same time, 44% of advanced bot attacks now target APIs.

As agents interact directly with platforms and APIs, organizations need a way to verify which agents are authorized and accountable. AG9 supports:

Enterprises deploying internal agent fleets that require frictionless, auditable access to partner APIs and SaaS platforms
Security and DDoS providers like Cloudflare are seeking machine-readable trust signals as human-traffic assumptions break down
API-first platforms seeking to authorize legitimate agents while preventing scraping, credential stuffing, and automated abuse
LLM framework developers building on LangChain, AutoGen, OpenAI, and similar tools who need a standardized identity layer for their agents
Regulated industries in finance, healthcare, and legal, where agent actions must be fully auditable and linked to a verified human principal

Multiple companies are already finding value in AG9, including Moonpay, Crossmint, RentahumanAI, t54ai, SurfAI, SorinAI, Reah, and more, showcasing the clear need for this solution.

Getting Started

AG9 is framework-agnostic and designed to drop into existing infrastructure, whether a developer is running Cloudflare Workers, an API gateway, or building on LangChain, AutoGen, or OpenAI Assistants.

Integrating AG9 takes minutes. AG9 is designed to drop into existing infrastructure with minimal configuration — your agent is registered, palm-scan verified, and cryptographically bound to a verified human owner, ready to operate across any AG9-integrated platform.

To learn more, visit AG9.ai

About VeryAI

VeryAI is building the identity layer for AI safety, combining biometrics with AI and deepfake detection to restore trust. Its flagship product is redefining identity verification with the first hardware-free palm scan that works on any smartphone. Built to withstand the age of AI deepfakes and spoofing, VeryAI is designed with privacy at its core. Founded by experts in biometrics, crypto, and AI, VeryAI equips organizations in sectors from finance and government to social media with fraud-proof identity and authenticity verification that is accurate, private, and effortless. By putting the next layer of trust in the palm of your hand, VeryAI is creating a new standard for digital security.