The Algorand Foundation has introduced AC2, an open protocol that allows users to securely interact with AI agents and control their actions. The protocol is blockchain-agnostic and provides an encrypted direct connection between the user's wallet or application and the AI agent.
AC2 enables agents to request permission to perform various actions, such as making payments, signing code, or accessing APIs. The user sees the request in their wallet and decides whether to allow the action. There is no need to share private keys with the AI agent.
The protocol is designed for various use cases. A software agent can request permission before signing, while a payment agent can send transaction data to the user's wallet for verification. Agents that make purchases can operate within predefined limits: the user defines what the agent can buy and how much it is allowed to spend.
For messaging, AC2 uses DIDComm v2.0, and for authentication, it uses passkeys via Liquid Auth, which is based on FIDO2 and WebAuthn standards. The protocol supports text and voice interaction, delegation of signing rights, and can operate without a centralized intermediary or even without a blockchain.