Agent Passports

Know exactly which agent
is on the wire

Agent Passports give every agent a revocable Ed25519 identity and a reputation earned from verified behavior — so tools, teammates, and auditors can trust the actor before trusting the action.

The passport

More than an API key

A shared secret proves someone knows a string. A passport proves who built the agent, what it may touch, and how it has behaved — and lets you shut it off the moment any of that changes.

A dedicated Ed25519 keypair per agent — no shared secrets, no god-mode keys passed between processes

Reputation compiled from signed receipts, portable across every tool and workspace the agent touches

Revocation that reaches every enforcement point in under a second — the next call fails closed

Agent Passport
Atlas Research
agt_7Hk2p9QvX
Model
claude-opus-4
Scope
4 granted
Budget
$500 / mo
Reputation
96 / 100
Signed by govern.sh · Ed25519
3045022100b4f2…a91e7c sig:verified
mint-passport
$ govern agents create --name atlas-research
generating ed25519 keypair…
agent_id agt_7Hk2p9QvX
public_key ed25519:Gx7f42…9dAe
scopes read:web · write:notion
budget $500 / month
revocation instant · fleet-wide
passport minted · signature verified
sig 3045…a91e7cverified
Minting

One call to mint, one click to revoke

Passports are infrastructure, not paperwork. Mint them wherever you provision agents, rotate keys without downtime, and revoke a compromised identity before its next call goes through.

Mint from the SDK, CLI, or your provisioning pipeline — identity becomes part of the deploy, not a ticket

Rotate keys on your schedule; history signed under old keys remains verifiable forever

Revoked passports are rejected at the Policy Enforcement Point — no cache to purge, no keys to chase down

Capabilities

Identity primitives, production grade

Everything you need to run a fleet of named, accountable agents — without building a PKI team first.

Ed25519 keypairs

Modern elliptic-curve identity minted per agent. Private keys stay in your infrastructure; only signatures cross the wire.

Instant revocation

Kill a compromised agent in one click. Revocation propagates to every enforcement point in under a second, and revoked passports fail closed.

Portable reputation

A track record compiled from signed receipts, not self-reported claims — and it follows the agent across tools, teams, and vendors.

Key rotation

Rotate keys on your schedule without downtime. Receipts signed under old keys stay verifiable across every generation.

Passport registry

Any counterparty can check a passport's signature, status, and reputation against the registry — no govern.sh account required.

Scoped credentials

A passport carries its scopes, budgets, and approval rules with it — one credential that encodes the whole contract.

Give your agents a name worth trusting.

One API call mints a verifiable identity. Free for your first three agents — no credit card required.