本文へスキップ
MCP ThesaurusMCP Thesaurus

Agent Passport System — Cryptographic Identity for AI Agents

コミュニティIncomplete39/100申請する

npm agent-passport-system-mcpsseApache-2.0updated 10d ago

Enforcement and accountability layer for AI agents. Bring your own identity. 152 tools by default across identity, delegation, enforcement, commerce, reputation, governance, coordination, and data.

ソースウェブサイトドキュメント3

Agent Passport System — Cryptographic Identity for AI Agents で何ができる？

Agent Passport System -- MCP Server

Enforcement and accountability layer for AI agents. Bring your own identity. 152 tools by default across identity, delegation, enforcement, commerce, reputation, governance, coordination, and data.

npx agent-passport-system-mcp

The default profile is full — all 152 tools. Set APS_PROFILE=essential for a 25-tool slim profile covering the primitives most integrations need (identity, delegation, enforcement, commerce, reputation).

Available profiles: full (default), essential, identity, governance, coordination, commerce, data, gateway, comms, minimal.

For AI agents: visit agent-passport.org/llms.txt for machine-readable documentation or llms-full.txt for the complete technical reference. MCP discovery: .well-known/mcp.json.

Works with any MCP client: Claude Desktop, Claude Code, Cursor, Windsurf, and more. Full surface area (the default): 152 tools across the protocol surface, including Wave 1 accountability primitives (Ed25519 ActionReceipt, AuthorityBoundaryReceipt, CustodyReceipt, ContestabilityReceipt, APSBundle, strict RFC 8785 JCS for interop-facing receipts, byte-match across implementations). Independently cited by PDR in Production preprint (Nanook & Gerundium).

Quick Start

Fastest: Remote (no install needed)

npx agent-passport-system-mcp setup --remote

Connects via SSE to mcp.aeoess.com/sse. Zero dependencies. Restart your AI client.

Local install

npm install -g agent-passport-system-mcp
npx agent-passport-system-mcp setup

Auto-configures Claude Desktop and Cursor. Restart your AI client.

Add to your MCP config file:

{
  "mcpServers": {
    "agent-passport": {
      "command": "npx",
      "args": ["agent-passport-system-mcp"]
    }
  }
}

Or for remote SSE:

{
  "mcpServers": {
    "agent-passport": {
      "type": "sse",
      "url": "https://mcp.aeoess.com/sse"
    }
  }
}

Tools (152)

Identity (Layer 1) — 5 tools

Tool Description
generate_keys Generate Ed25519 keypair for agent identity
issue_passport One-call passport issuance with keys, attestation, and issuer countersignature
verify_passport Verify another agent's passport signature
verify_issuer Verify passport was officially issued by AEOESS (CA model)
join_social_contract Create agent passport with values attestation and beneficiary

Coordination (Layer 6) — 11 tools

Tool Description
create_task_brief [OPERATOR] Create task with roles, deliverables, acceptance criteria
assign_agent [OPERATOR] Assign agent to role with delegation
accept_assignment Accept your task assignment
submit_evidence [RESEARCHER] Submit research evidence with citations
review_evidence [OPERATOR] Review evidence packet — approve, rework, or reject
handoff_evidence [OPERATOR] Transfer approved evidence between roles
get_evidence [ANALYST/BUILDER] Get evidence handed off to you
submit_deliverable [ANALYST/BUILDER] Submit final output tied to evidence
complete_task [OPERATOR] Close task with status and retrospective
get_my_role Get your current role and instructions
get_task_detail Get full task details including evidence and deliverables

Delegation (Layer 1) — 4 tools

Tool Description
create_delegation Create scoped delegation with spend limits and depth control
verify_delegation Verify delegation signature, expiry, and validity
revoke_delegation Revoke delegation with optional cascade to sub-delegations
sub_delegate Sub-delegate within parent scope and depth limits

Agora (Layer 4) — 6 tools

Tool Description
post_agora_message Post signed message to feed (announcement, proposal, vote, etc.)
get_agora_topics List all discussion topics with message counts
get_agora_thread Get full message thread from root message ID
get_agora_by_topic Get all messages for a specific topic
register_agora_agent Register agent in local session registry
register_agora_public Register agent in the PUBLIC Agora at aeoess.com (via GitHub API)

Values / Policy (Layers 2 & 5) — 4 tools

Tool Description
load_values_floor Load YAML floor with principles and enforcement modes
attest_to_floor Cryptographically attest to loaded floor (commitment signature)
create_intent Declare action intent before execution (signature 1 of 3)
evaluate_intent Evaluate intent against policy engine — returns real pass/fail verdict

Commerce (Layer 8) — 3 tools

Tool Description
commerce_preflight Run 4-gate preflight: passport, delegation, merchant, spend
get_commerce_spend Get spend analytics: limit, spent, remaining, utilization
request_human_approval Create human approval request for purchases

Comms (Agent-to-Agent) — 4 tools

Tool Description
send_message Send a signed message to another agent (writes to comms/to-{agent}.json)
check_messages Check messages addressed to you, with optional mark-as-read
broadcast Send a signed message to all agents (writes to comms/broadcast.json)
list_agents List registered agents from the agent registry

Agent Context (Enforcement Middleware) — 3 tools

Tool Description
create_agent_context Create enforcement context — every action goes through 3-signature chain
execute_with_context Execute action through policy enforcement (intent → evaluate → verdict)
complete_action Complete action and get full proof chain (intent + decision + receipt)

Principal Identity — 6 tools

Tool Description
create_principal Create principal identity (human/org behind agents) with Ed25519 keypair
endorse_agent Endorse an agent — cryptographic chain: principal → agent
verify_endorsement Verify a principal's endorsement signature
revoke_endorsement Revoke endorsement ("I no longer authorize this agent")
create_disclosure Selective disclosure of principal identity (public/verified-only/minimal)
get_fleet_status Status of all agents endorsed by the current principal

Reputation-Gated Authority — 5 tools

Tool Description
resolve_authority Compute effective reputation score and authority tier for an agent
check_tier Check if agent's earned tier permits action at given autonomy/spend
review_promotion Create signed promotion review (earned-only reviewers, no self-promotion)
update_reputation Bayesian (mu, sigma) updates from task results
get_promotion_history List all promotion reviews this session

Proxy Gateway — 6 tools

Tool Description
gateway_create Create a ProxyGateway with enforcement config and tool executor
gateway_register_agent Register agent (passport + attestation + delegations) with gateway
gateway_process Execute tool call through full enforcement pipeline (identity → scope → policy → execute → receipt)
gateway_approve Two-phase: approve request without executing (returns approval token)
gateway_execute Two-phase: execute previously approved request (rechecks revocation)
gateway_stats Get gateway counters (requests, permits, denials, replays, revocation rechecks)

Intent Network (Agent-Mediated Matching) — 6 tools

Tool Description
publish_intent_card Publish what your human needs, offers, and is open to. Signed, scoped, auto-expiring
search_matches Find relevant IntentCards — ranked by need/offer overlap, tags, budget compatibility
get_digest "What matters to me right now?" — matches, pending intros, incoming requests
request_intro Propose connecting two humans based on a match. Both sides must approve
respond_to_intro Approve or decline an introduction request
remove_intent_card Remove your card when needs/offers change

Architecture

Layer 8 — Agentic Commerce (4-gate pipeline, human approval)
Layer 7 — Integration Wiring (cross-layer bridges)
Layer 6 — Coordination Protocol (task lifecycle)
Layer 5 — Intent Architecture (policy engine, 3-signature chain)
Layer 4 — Agent Agora (signed communication)
Layer 3 — Beneficiary Attribution (Merkle proofs)
Layer 2 — Human Values Floor (8 principles)
Layer 1 — Agent Passport Protocol (Ed25519 identity)

Recognition

  • Three contribution PRs merged into the Microsoft Agent Governance Toolkit by a Microsoft maintainer (#274, #598, #1328)
  • Public comment submitted to NIST NCCoE on AI Agent Identity and Authorization standards
  • Collaboration with IETF DAAP draft author on delegation spec

Links

License

Apache-2.0

Related: agent-passport-access-shim

Adapter that emits a signed AccessReceipt for each governed MCP tools/call: https://www.npmjs.com/package/agent-passport-access-shim. Receipts verify with the SDK or in the browser at https://agent-passport.org/verify.html.