A
AAP
DocsSpecification
Getting StartedFAQToken Generator
HomeDocumentationSpecification

Complete Specification

Full technical specification with formal schemas, semantics, and validation rules.

Implementation Resources

JSON Schemas

Formal schemas for validating AAP tokens and claims

Test Vectors

70+ test cases for validating your implementation

Reference Implementation

Working Python implementation of AAP Authorization Server

Deployment Guide

Production deployment patterns and best practices

Threat Model

Security analysis with attack scenarios and mitigations

Token Generator

Interactive tool to generate and test AAP tokens

Agent Authorization Profile

OAuth 2.0 authorization for autonomous AI agents. Built on open standards.

About AAP

  • What is AAP
  • Why AAP
  • How it works
  • Quick Links

Documentation

  • Documentation Hub
  • Getting Started
  • Full Specification
  • AI Agent Access
  • Deployment Guide
  • FAQ
  • Examples

Technical Resources

  • JSON Schemas
  • Test Vectors
  • Token Generator
  • Reference Implementation
  • Migration Guide
  • Threat Model

Community

  • GitHub
  • Discussions
  • Contributing

Standards

  • OAuth 2.0
  • JWT (RFC 7519)
  • Token Exchange (RFC 8693)
  • DPoP

© 2026 Agent Authorization Profile. Built on OAuth 2.0, JWT, and open standards.

GitHubIETF