A signature-based authentication standard that cryptographically binds identity and intent to every request.
The missing primitive to securely verify humans, machines, and AI agents on the web, built on Ethereum.
Traditional authentication relies on issuing credentials: API keys, JWTs, session tokens. It requires a login step and issuing secrets that must be stored and protected — if they leak, your account is compromised.
ERC-8128 flips this model. Instead of shared secrets, the client signs each request with an Ethereum account, while the server verifies it without issuing anything. Authentication becomes stateless for clients, lighter for servers, and provides a first-class mechanism for agents and backend systems to perform scoped, expiring actions across any service.
And since it’s built on RFC 9421 (HTTP Message Signatures), it integrates directly with existing web infrastructure. erc8128.org
