# DEFS

> DEFS (defs.ai) is an agent access gateway for credit unions and community banks. It sits between AI agents and a financial institution's online banking, verifies each agent's credentials, enforces limits set by both the member and the institution, and allows, steps up, or denies each request before money moves.

Status: early stage. A working prototype runs on test data. DEFS is not yet live at any institution and has not completed third-party audits or certifications. It is seeking pilot partners.

## Key facts
- Audience: credit unions and community banks, primarily $500M–$5B in assets.
- Scope: non-card money movement through online banking: bill pay, internal and external transfers, ACH, and disputes. Card transactions are out of scope.
- Credentials: DEFS consumes credentials that agents already carry; it never issues its own "agent passport". The prototype verifies Cloudflare Web Bot Auth and Visa Trusted Agent Protocol HTTP message signatures (RFC 9421, Ed25519) and Google AP2 mandates (SD-JWT). Mastercard Agent Pay, Prove and World ID are planned and stubbed in the prototype.
- Controls: member scopes (e.g. "bill pay up to $500, no external transfers") plus institution policy caps; allow / step-up / deny decisions; per-agent limits, blocks and revocation; institution-wide kill switch; append-only hash-chained audit log.
- Member experience: a "My connected agents" page listing each agent, its permissions, and a revoke button.
- Network: a shared rogue-agent blocklist so a block at one participating institution is visible to others.

## Links
- [Home](https://defs.ai/): product overview and FAQ
- [Full text for LLMs](https://defs.ai/llms-full.txt)
- [Pilot waitlist](https://defs.ai/#waitlist)