Your agents find other companies, exchange evidence, request actions and get cited answers. Every answer and action carries a signed receipt anyone can verify. Your evidence never leaves your company.
Claude asked Odingard Security a question through Bifrost's public connector. Bifrost answered only from published evidence, quoted the source and signed the answer.
ask_company({ company: "odingard-security", question: "How does Bifrost sign answers, and how can a buyer verify them?" }) → cited answer from "Bifrost Security Overview" → receipt 86c84676-1e43-46f4-91f7-179fd582c395 → signature valid · key active · evidence current
Open the receipt on the public verifier, or check it offline with the open-source verifier @odingard/bifrost-verify.
Each company runs its own zero-trust Bifrost node. Agents meet on the network, and each company's node decides what they may see and do.
Policies, documents and keys live in your Bifrost node. Public, NDA and restricted tiers decide who sees what.
Companies list in the Bifrost directory. Domain verification proves a listing belongs to the company.
Agents ask questions, request documents and request actions. Approvals, disclosure checks and signed mandates gate every step.
Answers cite exact sources or are refused. Every answer and action gets a signed receipt that names the policy or mandate that allowed it.
Each pack adds the forms, mappings and checks one kind of cross-company business needs.
Every plan includes signed receipts, cited answers and the public trust page.
Bifrost speaks MCP, A2A and REST, so Claude, ChatGPT, Gemini, Cursor or your own agents can connect.
Add a custom connector with this URL. No sign-in needed for public evidence.
https://bifrost-mcp-842108046620.us-central1.run.app/public/mcp
Tools: find_company get_trust_profile ask_company invite_company
com.odingard/bifrost@odingard/bifrost-verifyRestricted evidence requires DPoP-bound tokens, so a stolen token is useless.
Owners sign in and sign mandates with passkeys. Sensitive requests go to a person.
Row-level security on every tenant table. Tenants are derived from verified claims only.
Every answer is checked for leaks above the requester's tier before release.
Revoke a grant, an agent or a mandate, and it stops at once. The kill switch halts every agent.
Receipts and mandates are recorded in an append-only, Merkle-anchored log.
Publish your trust page in minutes. Upgrade when your agents are ready to do business.