We built ATTP -- HTTP for AI agents. Here's why.

HTTP was built for humans in 1991. Thirty years of bolt-on security later, we still have no per-message signing, no agent identity, no trust levels, no audit trail. AI agents are about to become the primary consumers of web APIs. They need a protocol built for them. We built ATTP -- Agent Trust Transport Protocol. The secure transport layer for AI agents. What ATTP does Every API call: Mandatory ECDSA P-256 signing (request AND response) Agent Passport (cryptographic identity, not bearer tokens) Trust levels L0-L4 (per-endpoint access control) Tamper-evident audit trail (built into the protocol) No insecure mode. Security is not optional. One line to add to any server const attp = require ( ' @proofxhq/attp ' ); app . use ( attp . verify ({ minTrust : ' L2 ' })); One line for the agent const attp = require ( ' @proofxhq/attp ' ); const res = await attp . fetch ( ' attp://api.example.com/v1/data ' ); Keys auto-generate. No certificate authority. No gateway. Works with existing HTTP infr