Skip to content

What is ATAH

An open protocol for AI-to-authenticated-human handoff

ATAH defines the data, consent, and lifecycle contract that lets AI systems hand off to verified human professionals when human expertise is needed. Open specification, public Charter, structural commercial neutrality.

In one paragraph: what is ATAH?

ATAH (Agent to Authenticated Human Protocol) is an open specification, published under Apache 2.0, that defines the trust, consent, and lifecycle layer for handing off from AI agents to verified human professionals — lawyers, licensed insurance agents and brokers, financial advisors, and other regulated or established practitioners. ATAH composes with MCP, A2A, ACP/AP2, OAuth, and Verifiable Credentials, and is exposed natively as MCP tools. It has two components: Discovery (provenance-visible candidate sets, no commercial weighting) and Handoff (consented, transient, vault-mediated PII flow with crypto-erasure on retrieval). It is governed by a public Charter with eight entrenched commitments.

What ATAH does

ATAH is a verified-data aggregation and handoff layer for professional information, with provenance attached, made AI-readable. Specifically:

  • Aggregates verified professional data from multiple authoritative sources — regulators, professional bodies, review platforms, individual self-declaration, and independent verifiers.
  • Tags every data point with provenance. Every claim is sourced and dated. The basis of trust is visible to AI agents and end users.
  • Makes that data AI-readable through structured JSON Schemas, an OpenAPI 3.1 contract, and MCP tool bindings, so any authenticated AI agent can query consistently.
  • Provides Discovery. AI agents query "find verified professionals matching these criteria" and receive a provenance-tagged candidate set, with structured non-recommendation disclosure attached.
  • Provides a handoff lifecycle for the end-user-to-professional case (where the end-user is an individual or a business) and structured consent receipts, vault-mediated PII flow, and crypto-erasure need protocol mediation rather than ad-hoc handling.

The protocol is appropriately scoped. It does one set of related things and does them well — it does not try to replicate what other layers do better: the AI platform's contextual knowledge of its user, the professional's own systems, the regulator's authoritative status records.

This is intentionally similar to how OAuth, Verifiable Credentials, MCP, and DNS work — protocols that do one thing rigorously rather than many things partially. ATAH joins that pattern.

Two professional categories, one infrastructure

Credentialled professionals — those whose standing can be verified against formal licences, certifications, or regulatory records. Lawyers, property and casualty insurance agents, financial advisors, doctors, engineers, tax planners, accountants, architects.

Established professionals — those whose standing is verifiable through professional body membership, peer recognition, and trusted partner data, even where formal licensing does not apply. PR specialists, management consultants, executive coaches, HR professionals, project managers, and many others.

Every data point in every profile carries its own verification status — registry-verified, partner-verified, VC-verified, or self-declared — returned transparently in every response via a parallel provenance map. AI systems receive granular trust signals and can communicate them clearly to users. The basis of trust is visible, not collapsed into an opaque score.

The trusted partner model

Trusted partners are organisations that hold reliable, maintained data about professionals and meet ATAH's published partner standards. The types of organisation the protocol works with include regulatory and licensing bodies, professional bodies for credentialled and established fields, review platforms with anti-gaming attestation, and approved independent verifiers.

The model is consistent across partner types. Partners pay ATAH for integration access against a published cost-recovery fee schedule, with waivers and deferred fees for regulators and public-interest bodies. Members gain structured machine-readable presence in AI-mediated environments. The commercial model exists to fund the work of building and maintaining the protocol; it is not the reason the protocol exists.

Three commitments are non-negotiable in the partner model:

  • Partner payments do not influence matching ordering or recommendation status.
  • Partner data carries equal data-handling and provenance treatment regardless of fee tier.
  • No exclusive arrangements within any category — multiple bodies, regulators, verifiers, and review platforms may operate in the same category.

What ATAH is not

  • Not a recommendation engine. ATAH returns provenance-visible candidates based on declared need, verification evidence, category rules, and availability. The user or calling AI platform remains responsible for selection. The non-recommendation status is machine-readable in every response.
  • Not a regulator, enforcement body, or complaints adjudicator. Concerns reported through ATAH are routed to the relevant regulatory or professional body.
  • Not a payment processor or marketplace. No transaction or commerce capability.
  • Not a directory product or AEO replacement. Professionals are not "promoted" or "ranked for visibility" in any commercial sense.
  • Not a personal data repository. End-user personal data passes through ATAH only as transient handoff data, held in a transient encrypted vault, and crypto-erased per protocol.
  • Not an end-user interface. End-users — whether individuals or businesses — interact with AI systems, which use ATAH on their behalf.

Where ATAH sits

ATAH is the layer above the existing agent-web stack. The protocols below are all machine-to-machine; ATAH is the machine-to-human layer that sits on top of them. It composes with — rather than replaces — these standards. In practice, ATAH is exposed natively as MCP tools (and as REST), so an AI platform already speaking MCP calls ATAH directly with no separate data protocol to wire up.

LayerPurpose
OAuth 2.1 / OIDCAuthentication
W3C Verifiable CredentialsCryptographically verifiable credential format
MCPTool and data access for AI agents
A2AAgent-to-agent communication
ACP / AP2Agentic commerce and agent-mediated payments
ATAHAI-to-authenticated-human professional handoff

ATAH does not duplicate the work of identity, credential, or commerce standards. Its specific contribution is the layer above — professional categorisation, the staged handoff lifecycle, the matching engine, the trusted-partner trust model, and the commercial-neutrality and provenance-visibility commitments.