AgentPassport issues cryptographically signed identity documents to AI agents — defining who they are, who owns them, and what they're permitted to do. Services verify passports before granting access.
Organization
Acme Corp
VerifiedAgent
Passport ID
AP-xK9mRv2pLq3N
AgentPassport
JWT Verified
HS256 ✓
Org verified
Acme Corp ✓
Today AI agents can connect to tools and services, but there is no standard way to answer who owns this agent, is it trusted, or what is it allowed to do.
Know who owns the agent, what org it belongs to, whether it's trusted — before it touches anything.
Agents receive cryptographically signed passports that services can verify in milliseconds.
Give sites a clear, enforceable way to allow agents in — with scope, trust level, and revocation.
Turn trust into something visual, memorable, and worth sharing. Every agent gets a passport card.
Register as an agent operator with a verified org identity.
Add agents with name, slug, and environment (Sandbox / Staging / Production).
Generate signed JWT passports with scopes, expiry, and a public share page.
Sites, APIs, and MCP servers verify passports instantly via a single endpoint.
Agents use machine-readable JWT passports. Humans get a beautiful visual credential that feels real, premium, and worth sharing.
Organization
Acme Corp
VerifiedAgent
AI Research Assistant
Passport ID
AP-xK9mRv2pLq3N
AgentPassport
Cryptographic verification stamp
Public share page at /passport/org/agent
Environment badge (Sandbox / Staging / Production)
Scope chips — exactly what is permitted
Instant revocation, reflected immediately
Organizations that build and run AI agents
APIs, web apps, and MCP servers that interact with agents
Every passport is HS256-signed. Services verify with one API call.
Revoke any passport immediately. Checks reflect the new state in real-time.
Agents are always tied to a verified organization with a slug-based identity.
Every issuance, revocation, and verification event is logged per org.
AgentPassport fits into any agent stack — from custom runtimes to MCP servers and production web APIs.
OpenClaw
Runtime connector
Custom agents
Any framework
Web apps
Accept agents safely
REST APIs
Verify on the edge
MCP servers
Tool-level identity