~/ahcp ❯ ahcp about

AHCP — Agent Human Coordination Protocol

A vendor- and runtime-neutral protocol for human coordination across an agent fleet — many agents, one hub. Agents notify, ask, and hand off tasks; humans coordinate from one place.

agent ┐
agent ┤
agent ┼──▶  [ AHCP hub ]  ──▶  human
agent ┤
agent ┘
       ◀──  signed answer routed back to the agent

~/ahcp ❯ ahcp verbs

The three verbs

notify: FYI / summary / status. No response. — a daily digest
ask: A decision the human makes; the answer routes back to the (often exited) agent. — ship / hold
task: A manual action a human performs out-of-band, then marks done. — rotate a key

~/ahcp ❯ npm run demo # you are the human in the loop

A human-in-the-loop demo

📬 notify → "Daily deploy digest — web-app" [durable · status=delivered]

📬 NEW DECISION in your inbox:

Ship the candidate build to prod, or hold?

• ship — Ship to prod now

• hold — Hold for review

👤 Your decision [ship/hold]: ship

🔏 Hub attested the actor, signed the Response, pushed it

🤖 Agent re-invoked: signature verified ✓, sealed state opened ✓

you chose "ship" → 🚀 DEPLOYING abc123def

🛡 Replayed Response → acted=false (duplicate delivery, ignored)

~/ahcp ❯ ahcp docs

Documentation

~/ahcp ❯ ahcp skills

Agent-native skills

Adopt AHCP from your agent — install the plugin, then build:

/plugin marketplace add autnmy/ahcp-protocol
/plugin install ahcp-skills@ahcp

implement: build a conformant AHCP Hub in your app — any language or framework
build-notify: generate your app's notify sender skill
build-ask: generate your app's ask sender skill
build-task: generate your app's task sender skill

~/ahcp ❯ ahcp rules

Trust rules

The Hub assigns the message id; idempotency_key is required on ask/task.
state is agent-owned and AEAD-sealed — the Hub never holds the key; returned state is untrusted until verified.
Every pushed Response is signed (RFC 8785 JCS + detached signature); agents verify, dedupe, and act at most once.
actor is Hub-attested; resolver authz is fail-closed; callbacks must target an agent-owned, verified host.