Ethereum (ETH) introduced ERC-8004 is heading to mainnet, positioning the community as a impartial infrastructure for an issue the AI business cannot but resolve: how brokers show they’re reliable when no single platform controls the popularity layer.
The timing reveals the underlying stress, as AI brokers are shifting from demos into manufacturing methods that set off actual transactions.
Mastercard is drafting commerce requirements for agentic checkout, UK banks are piloting customer-facing agent trials slated for early 2026, and Gartner initiatives 40% of enterprise functions will combine task-specific brokers by year-end.
Nevertheless, a Camunda report discovered that whereas 71% of organizations now deploy AI brokers, solely 11% of use circumstances reached manufacturing over the previous yr. The blockers are belief, transparency, and regulatory threat.
Dynatrace surveys present roughly half of agentic initiatives stalled in pilot, with 52% citing safety and compliance points, and about 70% of AI choices nonetheless requiring human verification.
ERC-8004 tries to productize that belief hole by defining three light-weight registries: id, popularity, and validation. These could be deployed on mainnet or layer-2 blockchains as application-layer contracts, not a protocol fork.
Ethereum’s official account framed the usual as enabling “discovery and moveable popularity,” so AI companies can “interoperate with out gatekeepers.” The canonical spec stays in draft standing on eips.ethereum.org.
Three registries, three coordination issues
The Identification Registry turns every agent into an ERC-721 NFT with a world identifier and a pointer to a structured registration file.
That file lists capabilities, endpoints (MCP, A2A, ENS, DID, internet URLs), and call strategies, basically serving as a service listing for machine actors.
Brokers turn into discoverable and transferable utilizing commonplace NFT tooling.
The spec contains elective endpoint area verification to show area management, and reserves an “agentWallet” area that requires EIP-712 signature or ERC-1271 verification to vary.
The design selection prevents “I am respected, pay right here” hijacks, the place an attacker swaps the fee handle whereas preserving the popularity.
Identification solves composability, as reputations and validations could be listed to a secure agent ID somewhat than a platform account. Ethereum is making an attempt to show agent id right into a public utility, the identical method ENS did for names, however for machine actors.
The failure mode is baked in, with ERC-8004 proving that the metadata belongs to the agent NFT, not that the endpoints are secure or trustworthy.
The spec warns that marketed capabilities “is likely to be non-functional or malicious,” which is why the opposite two registries exist.
The Repute Registry shops minimal, composable suggestions information on-chain and pushes wealthy particulars off-chain by way of URIs and hashes. Suggestions features a signed fixed-point worth with configurable decimals and elective tags.
The off-chain JSON can embody context like MCP device references, A2A activity IDs, and even proof-of-payment references. The spec explicitly names x402-style HTTP fee proofs.
There is a revokeFeedback path and an appendResponse perform for refunds, spam flags, or rebuttals.
ERC-8004 doesn’t promise an on-chain Yelp rating. It is nearer to a shared occasion rail the place totally different marketplaces, insurers, and auditors can compute their very own belief fashions.
The spec explicitly warns that summaries with out filtering reviewers are weak to Sybil assaults and spam, requiring clientAddresses filtering for getSummary calls.
Aggregation occurs each on-chain by means of primary composability and off-chain by means of subtle scoring. The design assumes popularity gaming, reminiscent of purchased opinions, collusion, and suggestions laundering, as inevitable, not distinctive.
Financial bias creeps in if proof of fee turns into de facto proof of credibility: massive spenders look reliable. And since wealthy suggestions is event-based and off-chain, whoever runs the very best indexers and filters might turn into a brand new gatekeeper.
The Validation Registry implements an on-chain request/response log during which brokers submit requests to validator contracts to confirm work, and validators put up outcomes together with elective proof URIs and hashes.
Agent house owners name validationRequest with a validator handle, agent ID, request URI, and a keccak dedication to the payload. Validators reply by way of validationResponse with a rating, a response URI, a hash, and a tag.
The spec permits progressive responses, together with tender and exhausting finality by way of tags, permits a number of responses, and retains the design deliberately generic to accommodate crypto-economic re-execution, zkML verifiers, TEE oracles, or trusted judges.
Validation is the belief escalator: popularity works for low-stakes duties, however validation is what you attain for when cash, compliance, or legal responsibility are on the road.
The EIP describes tiered belief proportional to value-at-risk: pizza orders versus medical diagnoses.
The failure mode: who validates the validators? ERC-8004 information validator outputs however does not resolve validator integrity, making a meta-market for validator reputations, staking, insurance coverage, and audit manufacturers.
| Registry | What it does | What’s on-chain vs off-chain | Key mechanisms | Major failure mode |
|---|---|---|---|---|
| Identification Registry | Discovery + sturdy agent ID (composable deal with others can reference) | On-chain: ERC-721 agent ID + pointers / key-value metadata Off-chain: structured registration file (capabilities, endpoints, contact) | Optionally available endpoint area verification; agentWallet change requires EIP-712 signature or ERC-1271 verification |
Metadata could be truthful-but-malicious (possession ≠ honesty/security) |
| Repute Registry | Moveable suggestions indicators throughout orgs/markets (shared belief occasions) | On-chain: minimal suggestions primitives; occasion rail Off-chain: context URIs/hashes (activity IDs, fee proofs, and so on.) | revokeFeedback + appendResponse (refunds/rebuttals); getSummary requires reviewer filtering to scale back Sybil |
Sybil/collusion + “finest indexer wins” gatekeeping |
| Validation Registry | Third-party verification for high-stakes actions (belief escalator) | On-chain: request/response log + scores/tags Off-chain: proof URIs/hashes | Commitments by way of requestHash; progressive responses (tender/exhausting finality tags), a number of responses allowed | “Who validates validators?” → validator corruption / cartelization |
Why Ethereum thinks that is infrastructure
The rising agent stack seems like this: MCP and A2A deal with communication and orchestration, x402 (HTTP 402 plus stablecoin settlement) handles funds, and ERC-8004 handles belief and discovery.
The clear line is that ERC-8004 does not compete with MCP, A2A, or x402. As a substitute, it composes with them.
The EIP contains fields for MCP and A2A endpoints, in addition to payment-proof references, inside off-chain suggestions payloads.
There is a broader business push towards impartial, open agent requirements governance, reminiscent of MCP shifting to Linux Basis stewardship to maintain it open.
ERC-8004 is Ethereum making a similar pitch in crypto: use public rails as an alternative of platform belief.
If it sticks, the winners aren’t simply “AI cash,” however layer-2 blockchains the place high-frequency popularity and validation logs are economical, id and attestation tooling, validator networks, and insurance-like middleware that monetize belief for high-stakes agent actions.
ERC-8004 turns belief right into a composable commodity, so the market will construct specialists to fabricate it (validators) and interpret it (scorers).
The adoption envelope is defensible however unsure.
Gartner’s 40% forecast for enterprise software integration by year-end provides top-of-funnel stress.
A bear case over 12-18 months sees 10,000 to 100,000 agent IDs registered throughout chains, with popularity largely sparse and validation uncommon.
Identification turns into a developer curiosity, and marketplaces stay platform-gated.
A base case sees 100,000 to 1 million registered brokers, with popularity occasions changing into the default receipt for agent companies and validation used for high-value duties and controlled flows.
ERC-8004 serves because the interoperability glue between open-agent protocols and machine funds, particularly on layer-2.
A bull case during which agentic commerce takes off and the business coalesces round shared popularity to keep away from platform lock-in produces 1 million to 10 million agent IDs, with validators and insurers rising as a brand new middleware class.
Ethereum and layer-2 blockchains turn into the coordination substrate for cross-market agent companies.
Dangers as a part of the design
Moveable popularity begins to resemble a cross-platform id shadow.
That can collide with enterprise governance and regulators, particularly the place agent actions contact funds, monetary recommendation, or private information. Regulators overseeing UK financial institution trials have flagged accountability dangers posed by autonomous methods.
Metadata manipulation stays unsolved: id proves possession of the registration file, not the truthfulness of claims. Validator corruption and cartelization turn into the brand new moat: validation outputs are moveable, however validator integrity is what markets will worth.
Current reporting on MCP server vulnerabilities confused that agent ecosystems are brittle. Composability can amplify exploits.
Repute and validation rails do not magically repair that, however they create a path to cost threat and gate high-stakes interactions behind stronger validation.
ERC-8004 is Ethereum’s try and turn into a impartial belief and discovery layer for agent-to-agent commerce, providing moveable id, moveable popularity indicators, and moveable validation outcomes. This occurs on the precise second brokers shift from demos to methods that set off real-world actions.
MCP and A2A assist brokers speak, whereas ERC-8004 tries to assist brokers belief.
The open query is whether or not the market needs shared infrastructure for belief or whether or not platforms will hold that moat proprietary. Ethereum is betting that the bottleneck is so extreme that neutrality turns into the product.
