DelegusRequest early access

The Delegus journal

Receipts

Notes on authority for AI agents, from the team building Delegus.

Latest

An AI agent can pay. That doesn't mean it was allowed to.

Payment rails now let AI agents pay. None of them check whether the agent was allowed to. A draft MPP extension carries the company's signed authority next to the payment, checked before settlement.

Team Delegus4 min read

Read

2026

  1. Our Vision: The Learning EnterpriseThe vision for the learning enterprise. Human-led, agent-powered and governed by bounded authority, so a business gets better at delivering what it promises.11 min
  2. The Banks of the RiverTelling an AI agent the rules didn't stop it breaking them. Enforcing them did, and the agents got more done. Why limits are what let us hand machines more work and keep our say.4 min
  3. The Enterprise Does Not Need the Smartest AI ModelEnterprise AI needs enough intelligence for the job, a way to know when it isn't enough, and limits on what it may do. Capability is measured; authority must be granted.11 min
  4. The Enterprise After the DemoA purchase order can be processed perfectly and still fail the business. Why agents need both proof of outcome and authority checked before they act.9 min
  5. Approve grants with a passkeyA company can now give its agent authority without a developer. Write it in plain words, check the exact read-back and approve it with a passkey. Delegus signs only what a person approved.4 min
  6. Authority as a primitiveWhy the agentic era needs something beyond identity, capability and access control.12 min
  7. Why a deny costs the same as an allowThe receipt is the product, whichever way the answer goes3 min
  8. A prompt is not a control. So we tested ours.A payments leader at a major bank set out what a payments agent needs beyond a prompt. We took the list and ran each item against Delegus. Here's what passes today, and the one we only partly meet.4 min
  9. Delegus now works in front of any web APIDelegus now checks an AI agent's authority in front of any web API, not just MCP servers. A gateway for APIs in any language, middleware for Node, Claude Code as a signed agent, and the Python helper.4 min
  10. Delegus Test: did your agent actually stay inside the lines?You told your agent not to push to main. Delegus Test checks whether that actually holds, before you ship. Free, on npm.3 min
  11. Ten questions to ask before your AI agents act at vendorsIdentity tells you who. Authority tells you what’s allowed. Ten questions for security and technology leaders.2 min
  12. Any web-facing MCP server, in any languageThe Delegus MCP gateway checks every tool call before it reaches your server. Any web-facing MCP server, in any language, with no Delegus code in the server.3 min
  13. Run our tests against your verifierA protocol is only open if someone else can implement it and find out whether they got it right. So the Delegus check comes with its tests.4 min
  14. The $5,000 order that never reached StripeOne grant of authority, two sellers, two ways to pay, and one revoke4 min
  15. The air springWhy Delegus exists3 min
  16. When Machines Act for UsFor millennia, we authorized other people to carry out our wishes. Now we are beginning to authorize machines to carry out our wishes.13 min
  17. Authority for MCP tool servers, in one lineA tool call is an action.4 min
  18. Delegus is liveOne call to check an AI agent's authority before it acts, and a signed receipt of the answer3 min
  19. Identity is not authorityIdentity tells you who the agent is. It doesn’t tell you whether it has the authority to do this.12 min
  20. Under a minuteFrom the homepage to a first signed receipt, step by step2 min
  21. Delegus v0.3: what's newDelegus v0.3 is live. Receipts that reveal no more than they need to, budgets across orders, seller-side actions, the chain of reliance, and a clear no for companies not in good standing.14 min
  22. Authority between strangersIdentity made strangers recognizable. Payment networks made strangers economically interoperable. v0.3 is the next step in making delegated authority between strangers verifiable.6 min