Hi, I'm Nilesh, building Talos Protocol, a trust layer for AI agents

I'm Nilesh Chakraborty, co-founder of Talos Protocol in San Francisco. We're building a security-auditable agent-to-agent protocol: cryptographic identity for agents (DIDs), time-limited capability tokens scoped to specific tools, end-to-end encryption using the Double Ratchet, and a tamper-evident audit log. There's an SDK for TypeScript, Python, Java and Go, a Rust core, and an MCP connector. Day to day I work with Claude, Claude Code, Cursor, Ollama and Vercel.

We're also extending Talos to agent transactions on the Universal Commerce Protocol, with merchant allowlists so agents can only check out where they're meant to. I'm still working out how to make the security model easy enough that builders adopt it without friction.

What I'd love from this community: feedback from anyone shipping agents that call tools or move money. What would you need to trust an agent with real permissions?