Agent to agent: how the Agent Negotiation Protocol works
When a buyer's AI agent negotiates with a vendor's AI agent, someone has to keep the record straight. How the open Agent Negotiation Protocol handles identity, mandate, and a ledger neither side can rewrite.
Four things every automated offer needs
A human negotiation carries a lot of trust implicitly. You know who is in the room, you know they can approve the number they just said, and if they deny it tomorrow, there are witnesses. Strip the humans out and all of that has to be made explicit, or the negotiation is worthless as evidence.
The protocol builds each exchange from four parts. First, a signed identity, so every message is cryptographically tied to the party that sent it and cannot be forged or repudiated. Second, a declared mandate, the authority the agent is operating under: the ceiling it may accept, the terms it may concede, the point past which it must stop and fetch a human. Third, a structured offer in machine readable form, price, term, metric, and conditions as data rather than prose, so there is nothing to misread. Fourth, a place for all of it to land that cannot be edited after the fact.
app.isvcosell.com/agent-protocol
Every agent arrives with a signed identity and a declared mandate before a single offer is exchanged.
THE SAME JOB, TWICE
TODAY, BY HAND
The vendor's automated deal desk quotes and counters at machine speed while your side answers with a spreadsheet and a slow email chain.
Offers live in half-remembered phone calls and buried threads, so the analyst reconstructs who said what from forwarded emails when the terms are drafted.
When the vendor claims your side agreed to something, there is no record proving what authority anyone actually had.
The dispute over that is not what we agreed burns days of legal and procurement time at the end of every negotiation.
Days of reconstruction per deal, and a record neither side can prove
WITH ISVCOSELL
Open the agent protocol page, read the open MIT-licensed standard, and run the first signed round.
Set your agent's declared mandate, the ceiling it may accept and the point where it must stop and fetch a human, and the boundary becomes part of the record.
Let the agent-to-agent rounds run in the sandbox, trading structured offers as data rather than prose, each message cryptographically signed to its sender.
Read the hash-chained session ledger, take the recommended landing zone, and make the human call from a complete tamper-evident transcript.
The opening rounds run at machine speed; the human reads a transcript, not a memory
What changes: the days spent reconstructing who offered what shrink to reading a ledger that cannot be quietly rewritten, because altering any entry breaks every hash after it. The opening exchange that took weeks of email rounds happens in seconds in the sandbox, and the person who signs starts from proof instead of recollection.
The mandate is the part that matters most to the person who signs. Your agent never gets a blank cheque. It negotiates strictly inside the envelope you set, and the boundary is part of the record, so the vendor's agent cannot claim your side agreed to something it had no authority to agree to. The judgment call that commits the company stays where it belongs, with a person.
PART TWO
The ledger neither side can rewrite
The centrepiece is the session ledger. Every message, offer, counter, acceptance, and walk away, is written into a hash chained record where each entry seals the one before it. Change any earlier line and every later hash breaks, so tampering is not just against the rules, it is visible on inspection.
This is the quiet revolution. Negotiations have always been a swamp of "that is not what we agreed" and half remembered phone calls. A hash chained ledger turns the whole exchange into a single source of truth that both parties hold and neither can quietly edit. When the contract is drafted, the terms trace straight back to the offers that produced them.
"A handshake you cannot photograph is worth less than an offer you can prove. The ledger is the photograph."
None of this runs unsupervised on your live deals. Agent to agent rounds happen in a sandbox, a contained space where your agent can explore the vendor's position, test where the floor really is, and surface a recommended landing zone, all before a human decides whether to take it forward. The machines do the fast, repetitive opening exchanges. The person reads the transcript and makes the call.
app.isvcosell.com/workflows
The agent round runs in a sandbox and routes a recommended landing zone to a person. Draft by machine, decision by human.
PART THREE
The weekly licensing brief
Want to be updated when major licensing and pricing changes land? One analyst brief a week: the price rises, metric changes and audit campaigns that move software costs. Work email only.
Get the brief
Why an open protocol, and not ours alone
A negotiation standard that only one vendor can read is not a standard, it is a moat. The protocol is deliberately open and MIT licensed so that any buyer agent and any seller agent can speak it, whether or not either was built here. A closed protocol would let whoever controls it also control the terms, which is precisely the asymmetry buyers are trying to escape.
Openness is also what makes the ledger credible. If the format is public, a court, an auditor, or the counterparty's own tooling can verify the chain independently. Evidence that only one side can read is not evidence. The protocol is a public good on purpose, because trust between adversaries only works when the referee is neutral.
There is a longer game here too. Standards win by adoption, not by fiat, and a buyer side protocol only disciplines vendor agents once enough of the market speaks it. Keeping it open is how that happens: no license to negotiate, no gatekeeper to pay, nothing stopping a vendor from adopting it except the fact that it makes their agent accountable. The asymmetry buyers have lived with for a decade does not close because one platform got clever. It closes when the rails everyone negotiates on are ones nobody privately owns.
IN PRACTICE
What the protocol guarantees
1 No forged offers. Every message is signed to its sender, so neither side can invent a concession the other never made, or deny one it did.
2 No authority you did not grant. Your agent negotiates inside a declared mandate. Past the boundary it stops and asks a human, and the boundary is on the record.
3 No quiet rewrites. The hash chained ledger seals the order of events. Altering an earlier entry breaks every later one, so tampering shows.
4 No lock in. The protocol is open and MIT licensed, so it works across agents from different builders and can be verified by anyone.
THE HONEST LIMIT
Machines negotiate, people commit
The protocol does not hand your renewal to a robot. It automates the part that was always mechanical, the opening exchange of numbers, and makes it provable. The relationship, the trade offs, and the signature stay human. What changes is that the human now starts from a complete, tamper evident transcript instead of a vague memory of a call.
That is the whole design goal. The first round gets faster and better documented, the record becomes something you can actually rely on, and the decision that binds the company remains a person's to make. You can read the standard, and run the first signed round, from the agent protocol page.
app.isvcosell.com/cases/example
A case, end to end: the strategy, the opening email, every vendor reply with the agent's read of it, and the offer that stopped the run for a person.
About the author
Fredrik Filipsson, Cofounder, ISVCOSELL
Fredrik has spent more than twenty years in enterprise software, with time at Oracle, IBM, SAP, and Salesforce before moving to the buy side. He structured and priced the kind of large agreements most buyers only see once or twice in a career, which taught him where the leverage sits and how far a vendor will actually move. He started ISVCOSELL to hand that knowledge to every sourcing team.
More posts by FredrikConnect on LinkedIn →
See it in the product
How benchmarking works →Browse the use cases →Every feature →Calculate your time saved →
FREE TRIAL · FULL PLATFORM · NO CARD REQUIRED
Put a signed, ledgered agent on your next renewal.
The free trial opens the benchmarking database, 1,483 vendors deep, plus the negotiation guides, playbooks, and talking points for your own renewals. No card needed, a corporate email is all it takes.
Start your free trial →Or decode a contract free, no account
Free for 30 days, no card needed. Your data stays isolated at the database, and you can export or delete it any time.
Watch it in action
The ISVCOSELL Deal-RoomHand ISVCOSELL the negotiationThe email that writes itself
Browse the full demo library →
THE ISVCOSELL AI BRIEF · WEEKLY
The week in enterprise software buying, in one email.
What shipped on the platform, and the pricing and licensing moves worth knowing before your next renewal. One email a week, to your work address. Unsubscribe any time.
Subscribe
Related reading
- agent protocol page
- Or decode a contract free, no account
- Start your free trial
- See what changed
- How benchmarking works
- ← All posts
- Every feature
- FF
- Calculate your time saved
- Browse the use cases
- Browse the full demo library
- Hand ISVCOSELL the negotiation
- The ISVCOSELL Deal-Room
- The email that writes itself
Pricing data and source text from the VendorBenchmark library. Co-sell reading is this site’s.