Know exactly which agent
is on the wire
Agent Passports give every agent a revocable Ed25519 identity and a reputation earned from verified behavior — so tools, teammates, and auditors can trust the actor before trusting the action.
More than an API key
A shared secret proves someone knows a string. A passport proves who built the agent, what it may touch, and how it has behaved — and lets you shut it off the moment any of that changes.
A dedicated Ed25519 keypair per agent — no shared secrets, no god-mode keys passed between processes
Reputation compiled from signed receipts, portable across every tool and workspace the agent touches
Revocation that reaches every enforcement point in under a second — the next call fails closed
One call to mint, one click to revoke
Passports are infrastructure, not paperwork. Mint them wherever you provision agents, rotate keys without downtime, and revoke a compromised identity before its next call goes through.
Mint from the SDK, CLI, or your provisioning pipeline — identity becomes part of the deploy, not a ticket
Rotate keys on your schedule; history signed under old keys remains verifiable forever
Revoked passports are rejected at the Policy Enforcement Point — no cache to purge, no keys to chase down
Identity primitives, production grade
Everything you need to run a fleet of named, accountable agents — without building a PKI team first.
Ed25519 keypairs
Modern elliptic-curve identity minted per agent. Private keys stay in your infrastructure; only signatures cross the wire.
Instant revocation
Kill a compromised agent in one click. Revocation propagates to every enforcement point in under a second, and revoked passports fail closed.
Portable reputation
A track record compiled from signed receipts, not self-reported claims — and it follows the agent across tools, teams, and vendors.
Key rotation
Rotate keys on your schedule without downtime. Receipts signed under old keys stay verifiable across every generation.
Passport registry
Any counterparty can check a passport's signature, status, and reputation against the registry — no govern.sh account required.
Scoped credentials
A passport carries its scopes, budgets, and approval rules with it — one credential that encodes the whole contract.
Built to work as one system
Passports, policies, approvals, and receipts share one control plane — each primitive makes the others stronger.
Give your agents a name worth trusting.
One API call mints a verifiable identity. Free for your first three agents — no credit card required.