Draft. These pages are working drafts published in good faith. They are not legal advice. A formal legal review will replace this notice before the v1.0 launch. To raise a question, use /contact.

Spec licence

Last updated: 5 May 2026

Summary

The AI Identity specification — the technical documents published by AI Identity Organization under /spec, including /spec/api, /spec/handshake, /spec/mcp, /spec/mcp-identity, and /spec/agent-listings — is offered to the world under Creative Commons Attribution 4.0 International (CC-BY 4.0).

This means you may, for any purpose including commercial use:

  • Share — copy and redistribute the material in any medium or format.
  • Adapt — remix, transform, and build upon the material.

Attribution

Under CC-BY 4.0 you must give appropriate credit, provide a link to the licence, and indicate if changes were made. The recommended attribution is:

AI Identity specification — CC-BY 4.0.
https://aiidentity.org/spec
https://creativecommons.org/licenses/by/4.0/

You may say "based on the AI Identity specification" or "compatible with AI Identity". You may not imply that AI Identity Organization endorses your reuse without permission.

What is covered

This licence applies to:

  • The text and diagrams of the specification pages under /spec.
  • JSON Schemas, JSON-LD examples, and reference payloads embedded in those pages.
  • The /.well-known/ai-identity.json structure documented at /spec/mcp-identity.

What is not covered

The CC-BY 4.0 licence on the specification does not cover:

  • The AI Identity name, logo, badge mark, and other brand assets of AI Identity Organization — see /brand for trademark / brand-use guidance.
  • The hosted registry service operated by AI Identity Organization at aiidentity.org, including its database, APIs, dashboards, and code — those are separate products governed by /legal/terms.
  • The @aiidentity/sdk npm package, which has its own MIT licence in its repository.

No warranty

The specification is provided "as is", without warranty of any kind, express or implied. Use of the specification is at your own risk. Implementing the specification does not by itself make a system a verified entry in the registry — that requires the registry workflow described at /spec/api.


Operated independently by AI Identity Organization. Questions: /contact.