What is Grantex?
Grantex is a delegated authorization protocol for AI agents, analogous to OAuth 2.0 for humans. It provides scoped consent, per-agent identity, granular revocation, and spending limits for agent actions. The Grantex MCP server implements OAuth 2.1 + PKCE for MCP servers and serves as an OACP (Open Agent Commerce Protocol) authority for agentic commerce, signing and verifying artifacts while remaining separate from merchant connector runtime or payment execution.
How to use Grantex?
Install the Grantex SDK (npm install @grantex/sdk, pip install grantex, or go get github.com/mishrasanjeev/grantex-go) and configure with an API key. Register an agent, request authorization from a user (via Grantex consent UI), exchange the authorization code for a signed RS256 JWT grant token, then verify the token offline using published JWKS. For MCP servers, use the MCP Auth Server in managed or self-hosted mode with OAuth 2.1 + PKCE.
Key features of Grantex
- Offline token verification using published JWKS (no network call needed)
- Per-agent identity and scoped consent for end users
- Granular revocation of individual agent access
- Spending limits on agent actions (e.g.,
payments:initiate:max_500)
- Audit logging for every agent action
- MCP Auth Server with OAuth 2.1 + PKCE support
- Public trust registry and anomaly detection with integrations
Use cases of Grantex
- AI travel agents booking flights and hotels on behalf of users with specific spending limits
- AI email agents that can send emails only after user consent and with scoped permissions
- Deploying AI agents that interact with cloud APIs without exposing full API keys
- Agentic commerce where buyer and seller agents negotiate and execute transactions under verified authority
- Multi-agent systems where one agent delegates to another with controlled scopes
评论