Agentic Intent Protocol (AIP)
AIP defines a common language for how AI Platforms, Operators, and Brand Agents communicate. It ensures every request, selection, and outcome is traceable, secure, and verifiable. For IAB-aligned content classification, use the canonical IAB Content Taxonomy 3.1 TSV: IAB Content Taxonomy 3.1 TSV1. TL;DR
AIP is the governance and execution layer between AI decisions and real-world actions. It defines how intent is captured, how participation is governed, how agents are selected, and how outcomes are settled.
2. Why it matters
Without a shared standard, each platform and commercial entity would need separate integrations. AIP replaces that fragmentation with one protocol that guarantees:- Predictable message formats
- Cryptographically signed requests
- End-to-end tracking from participation to outcome
- Clear separation between recommendation and delegation
3. How it works: three distinct messages
You have three distinct messages. Do not blur them.| Message | Direction | Purpose |
|---|---|---|
| A. PlatformRequest | Platform → Operator | ”Here is the user context + my declared intent + my constraints.” Platform-asserted; Operator validates and uses for participation governance. |
| B. ContextRequest | Operator → Brand Agents | ”Here is the eligible participation context you may respond to.” Operator-generated and trusted by brand agents. Eligibility already decided. |
| C. PlatformResponse | Operator → Platform | ”Here is the selected agent + interaction mode + metadata.” |
3.1 PlatformRequest (Platform → Operator)
Sent by the AI platform. The canonical request envelope carries:message_idfor canonical per-message auction identity
3.2 ContextRequest (Operator → Brand Agents)
Operator-enriched, operator-trusted, and (eventually) operator-signed. Answers: “Given a valid, eligible platform request, here is the participation context you may respond to.” Intent in ContextRequest is operator-generated and used for brand response decisions; it can differ from PlatformRequest intent (which is for governance only).3.3 PlatformResponse (Operator → Platform)
The outcome of the selection process. Contains:- The selected brand agent
- The interaction mode (recommend or delegate)
- Format-specific content for recommend mode
- A delegation object for delegate mode (see Delegation Protocol)
- A
serve_tokenfor event tracking
3.4 Authoritative flow (lock this)
- Platform builds PlatformRequest (context + explicit intent + runtime + selection parameters).
- Operator validates signature and request integrity; evaluates participation eligibility.
- If eligible, Operator generates ContextRequest.
- ContextRequest is sent to Brand Agents.
- Brand Agents return responses (bids, recommendations, or delegation offers).
- Operator runs selection and determines interaction mode.
- Operator sends PlatformResponse to platform.
4. Transport and Security
All messages use HTTPS or gRPC. Requests include secure headers:5. Identifiers
| Identifier | Purpose |
|---|---|
| platform_id | AI Platform |
| agent_id | Brand Agent |
| operator_id | Operator |
| wallet_id | Settlement |
| session_id | User session |
| message_id | Canonical message-turn identifier used for auction identity |
| context_id | Operator-generated auction identifier derived from (session_id, message_id) |
| response_id | Operator response |
| auction_id | Auction process |
| bid_id | Brand agent response |
| serve_token | Participation → interaction → delegation → outcome |
6. Example flow
Recommend mode:- User asks: “Best project management tool?”
- Platform sends PlatformRequest.
- Operator evaluates eligibility - participation allowed.
- Operator derives ContextRequest and sends to brand agents.
- Brand agents respond.
- Operator runs selection, determines recommend mode.
- Platform receives PlatformResponse and renders recommendation.
- Events logged under serve_token.
- User says: “Set up a Trello board for my team.”
- Platform sends PlatformRequest with transactional intent.
- Operator evaluates eligibility - delegation allowed.
- Operator runs selection - Trello agent selected.
- Platform receives PlatformResponse with delegation object.
- Platform asks user for consent.
- User consents and the Platform relays that consent to the Operator.
- Operator confirms Trello agent availability, initiates the delegated session, and records
delegation_started. - User completes setup. Trello agent fires
task_completed. - Operator verifies and settles.
7. Guarantees
- Signed, timestamped messages
- No serve-token collisions
- Independent verification
- Safe version upgrades
- Clear separation of governance, selection, and execution
Summary
AIP provides the transport, identifiers, and verification layer for governed commercial participation in AI systems - from intent detection through selection, delegation, and outcome-based settlement.