Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, email [email protected] and we’ll put it right.

Agent Passport System — Cryptographic Identity for AI Agents

NPM · AGENT-PASSPORT-SYSTEM-MCP · 2 COMPONENTS · SCANNED AUG 4

Cryptographic identity, delegation, governance, and commerce for AI agents. 150 tools.

+12 this week 63 Trust /100
Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security81
  • No malware found by supply-chain analysis.Pass
  • No known CVEs affecting this package version or its production dependencies.Pass
  • Runs a script at install time (postinstall) that we could not recognise. It may be perfectly ordinary, but we do not read the published tarball, so we cannot say what it does. View diagnostics → Partial
  • 7 of 7 dependencies flagged as unhealthy (7 deprecated). View diagnostics → Partial
Provenance & Transparency45
Schema Quality & AI Usability62
  • 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
  • AI-judged instruction clarity (poor).Fail
  • Tool/resource definitions use about 13193 tokens (~87/item across 150 items; 150 tools + 0 resources), lean.Pass
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management22
  • Stability check failed: the tool surface changed between 3.3.0 and 4.0.0: 0 tool removals, 23 breaking changes, 0 additions. See how to fix → Fail
Tool Coverage89
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 67% of tool parameters carry a description.Partial
Capabilities100
  • Implements a current MCP spec version (2026-07-28).Pass
Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · agent-passport-system-mcp

# add to Claude Code
claude mcp add aeoess-agent-passport-mcp -- npx -y agent-passport-system-mcp
# add to Codex CLI
codex mcp add aeoess-agent-passport-mcp -- npx -y agent-passport-system-mcp
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "aeoess-agent-passport-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "agent-passport-system-mcp"
      ],
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add aeoess-agent-passport-mcp --command npx --arg -y --arg agent-passport-system-mcp
# ~/.hermes/config.yaml
mcp_servers:
  aeoess-agent-passport-mcp:
    command: "npx"
    args: ["-y", "agent-passport-system-mcp"]
// mcp.json
{
  "mcpServers": {
    "aeoess-agent-passport-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "agent-passport-system-mcp"
      ]
    }
  }
}
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 4 Aug 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 19 to 22.

  • 3 Aug 26 −4
    • Dependency health: 1.00 → 0.00 functional
  • 2 Aug 26 +17
    • Malware scan: unverified → pass security
    • Schema quality: unverified → poor functional
  • 1 Aug 26 +44
    • Provenance: unverified → fail security
    • Stability: unverified → fail security
    • Install scripts: unverified → partial security
    • Known CVEs: unverified → pass security
    • The scripts that run when this package is installed changed: postinstall security
    • Maintenance: unverified → pass functional
    • Tool coverage: unverified → 100 functional
    • License: unverified → pass functional
    • Schema quality: unverified → 100 functional
    • MCP protocol: unverified → pass functional
    • Dependency health: unverified → 1.00 functional
    • Licence: Apache-2.0 functional
    • Package version: 3.3.0 → 4.0.0 functional
  • 31 Jul 26 −19
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 30 Jul 26 −27
    • Tool coverage: 100 → unverified functional
    • Schema quality: 100 → unverified functional
  • 27 Jul 26 51

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 4 Aug 2026 · Analysed npm/[email protected]

Provenance none

Ecosystem: npm · Outcome: none

Install scripts 1 script
Hook Tier Command
postinstall unreviewed echo '\n🔑 Agent Passport MCP installed! Run: npx agent-passport-system-mcp setup\n Or for zero-install remote: npx agent-passport-system-mcp setup --remote\n'
Dependencies 7 packages

7 packages in the resolved dependency tree · 7 deprecated.

MCP tools — 150 exposed · ~13,193 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens
create_access_snapshot ~91

Create an immutable access snapshot — freezes terms, jurisdiction, and constraints at moment of access. Anti-rug-pull.

NameTypeReqDescription
accessReceiptIdstringyes
allowedPurposesarrayyes
compensationRatenumberyes
currencystringyes
sourceIdstringyes
sourceJurisdictionstring
termsVersionstringyes

No output schema declared.

No examples provided.

create_agent_context ~98

[deprecated in v3.0.0 — use gateway.aeoess.com REST API] Create an enforcement context that automatically runs every action through the 3-signature policy chain.

NameTypeReqDescription
delegated_scopesarrayScopes to delegate
enforcementstringEnforcement level
missionstringyesAgent mission statement
namestringyesAgent name
spend_limitnumberMaximum spend allowed

No output schema declared.

No examples provided.

create_approval_request ~74

Create a multi-party approval request for charter amendments, office transfers, etc.

NameTypeReqDescription
policy_idstringyes
requested_bystringyes
subjectstringyesWhat is being approved (e.g. amendment ID)
subject_typestringyes
timeout_secondsnumber

No output schema declared.

No examples provided.

create_artifact_provenance ~118

Tag an agent-generated artifact with provenance metadata (content hash, risk class, authoring agent).

NameTypeReqDescription
artifact_typestringyese.g. email_draft, code_script, database_query
contentstringyesThe artifact content (used for hash, not stored)
delegation_refstringyes
intended_usestringyes
requires_human_executionboolean
risk_classstringyes
trust_epochnumber
valid_untilstringyes

No output schema declared.

No examples provided.

create_chained_governance_block ~131

Create a governance block for derivative content that references the original publisher's block. Preserves the chain of provenance.

NameTypeReqDescription
contentstringyesDerivative content
derivationTypestringyesType: summary, embedding, rag_chunk, translation, etc.
inferencestring
parentBlockstringyesOriginal governance block JSON string
privateKeystringyesDerivative agent's Ed25519 private key (hex)
publicKeystringyesDerivative agent's Ed25519 public key (hex)
trainingstring

No output schema declared.

No examples provided.

create_charter ~133

Create a new institutional charter — the constitutional root of an organization. Defines offices, amendment rules, dissolution policy.

NameTypeReqDescription
amendment_board_keysarrayyesEd25519 public keys eligible for amendment voting
amendment_required_sigsnumberyesSignatures required for amendment
dissolution_grace_secondsnumber
founder_private_keystringyesFounder's Ed25519 private key
founder_public_keystringyesFounder's Ed25519 public key
founder_rolestring
namestringyesInstitution name
officesarrayyesOffices to create

No output schema declared.

No examples provided.

create_data_enforcement_gate ~52

[deprecated in v3.0.0 — use gateway.aeoess.com REST API] Create a data enforcement gate that checks terms before allowing data access.

NameTypeReqDescription
modestringEnforcement mode

No output schema declared.

No examples provided.

create_decision_lineage_receipt ~106

Create a Decision Lineage Receipt — traces which data sources influenced a decision. Right-to-explanation primitive.

NameTypeReqDescription
contributingSourcesarrayyes
decisionArtifactIdstringyes
decisionTypestringyesE.g. loan_approval, content_moderation, risk_assessment
explanationstring
governingPurposestring
lineageCompletenessstringyes
transformChainarray

No output schema declared.

No examples provided.

create_delegation ~102

[OPERATOR] Create a scoped delegation from one agent to another.

NameTypeReqDescription
delegated_tostringyesPublic key of the agent receiving delegation
expires_in_hoursnumberDelegation validity in hours
max_depthnumberHow many levels of sub-delegation
scopearrayyesScopes to grant (e.g. ['web_search', 'code_execution'])
spend_limitnumberMaximum spend allowed

No output schema declared.

No examples provided.

create_derivation_receipt ~162

Create a signed derivation receipt tracking how data was transformed. Multi-hop lineage with break markers.

NameTypeReqDescription
breakReasonstring
derivativeIdstringyesUnique ID for the derivative artifact
derivativeTypestringyesType: rag_chunk, embedding, summary, model_weights, synthetic_derivative, etc.
externalBoundaryBreakbooleanTrue if data left the system and returned
isSyntheticDerivativeboolean
lineageConfidencestringyes
parentArtifactsarrayyesParent artifacts this was derived from
transformClassstringyesTransform type: copy, subset, summary, embedding, aggregation, synthetic, model_training
upstreamObligationsRetainedboolean

No output schema declared.

No examples provided.

create_disclosure ~53

Create a selective disclosure of principal identity. Controls how much info is revealed.

NameTypeReqDescription
levelstringyesDisclosure level: public (everything), verified-only (id+key+domain), minimal (hash+DID only)

No output schema declared.

No examples provided.

create_gateway ~73

[deprecated in v3.0.0 — use gateway.aeoess.com REST API] Create a ProxyGateway enforcement boundary.

NameTypeReqDescription
approvalTTLSecondsnumberTwo-phase approval timeout
gatewayIdstringCustom gateway ID
maxPendingPerAgentnumberMax pending approvals per agent

No output schema declared.

No examples provided.

create_hybrid_timestamp ~55

Create a gateway-issued hybrid timestamp (Consilium Q1: HLC + NTP uncertainty).

NameTypeReqDescription
drift_msnumberNTP drift bound in milliseconds
gateway_idstringyesGateway issuing the timestamp

No output schema declared.

No examples provided.

create_intent ~132

Declare an intent to perform an action. First step of the 3-signature chain.

NameTypeReqDescription
action_typestringyesWhat type of action (e.g. 'web_search', 'commerce:checkout')
contextstringWhy the agent wants to do this
delegation_idstringyesDelegation ID authorizing this action
scope_requiredstringyesWhich delegation scope is needed
spend_amountnumberExpected spend amount
spend_currencystringSpend currency (e.g. 'usd')
targetstringyesWhat the action operates on

No output schema declared.

No examples provided.

create_outcome_record ~92

Register an action outcome (agent perspective). Part of three-way reporting.

NameTypeReqDescription
action_idstringyes
declared_intentstringyes
divergence_scorenumberyes
observed_outcomestringyes
outcome_classstringyes
semantic_uncertaintystringyes
trust_epochnumber
valid_untilstringyes

No output schema declared.

No examples provided.

create_policy_context ~71

Create a v2 PolicyContext with mandatory sunset. Every v2 object requires one.

NameTypeReqDescription
policy_versionstring
trust_epochnumber
valid_untilstringyesISO 8601 expiration (mandatory, max 180 days)
values_floor_versionstring

No output schema declared.

No examples provided.

create_principal ~122

Create a principal identity (human or org behind agents). Gets its own Ed25519 keypair.

NameTypeReqDescription
contact_channelstringContact method (e.g. 'telegram:@aeoess')
disclosure_levelstringHow much identity to reveal
display_namestringyesHuman-readable name (e.g. 'Tima', 'Acme Corp')
domainstringVerifiable domain (e.g. 'aeoess.com')
jurisdictionstringLegal jurisdiction (e.g. 'US', 'EU')

No output schema declared.

No examples provided.

create_reserve_attestation ~122

Create a signed reserve attestation proving a delegation has actual funds (GPT #15).

NameTypeReqDescription
amountnumberyes
assurance_classstringyes
attestation_basisstringyes
attester_private_keystringyes
attester_public_keystringyes
charter_anchorstring
currencystring
delegation_idstringyes
false_attestation_penaltystring
office_idstring
ttl_secondsnumber

No output schema declared.

No examples provided.

create_task_brief ~98

[OPERATOR] Create a new task with roles, deliverables, and acceptance criteria.

NameTypeReqDescription
acceptance_criteriaarrayyesWhat 'done' looks like
deadlinestringISO 8601 deadline
deliverablesarrayyesExpected outputs
descriptionstringyesWhat needs to be done
rolesarrayyesRoles needed for this task
titlestringyesTask title

No output schema declared.

No examples provided.

create_v2_delegation ~84

Create a v2 delegation with versioning, mandatory sunset, and PolicyContext binding.

NameTypeReqDescription
delegateestringyesPublic key of the agent receiving authority
scope_categoriesarrayyesAction categories (e.g., ['analysis', 'communication'])
trust_epochnumber
valid_untilstringyesISO 8601 expiration

No output schema declared.

No examples provided.

declare_reidentification_risk ~55

Declare re-identification risk for transformed or synthetic data.

NameTypeReqDescription
assessedBystringyes
assessmentMethodstring
mitigationsAppliedarray
riskstringyes

No output schema declared.

No examples provided.

define_emergency_pathway ~118

Define a pre-authorized emergency pathway at delegation time. Only the delegator can define these.

NameTypeReqDescription
delegation_refstringyes
descriptionstringyes
expanded_scope_categoriesarrayyes
max_durationstring
review_authoritystringyes
review_deadlinestring
trigger_fieldstringyes
trigger_operatorstringyes
trigger_valueyes
trust_epochnumber
valid_untilstringyes

No output schema declared.

No examples provided.

detect_purpose_drift ~61

Detect when data purpose drifts through a workflow (e.g. research → commercial).

NameTypeReqDescription
allowedPurposesarrayyes
currentPurposestringyes
intermediateStepsarray
originalPurposestringyes

No output schema declared.

No examples provided.

endorse_agent ~95

Endorse an agent as a principal. Creates a cryptographic chain: principal → agent.

NameTypeReqDescription
agent_idstringyesAgent ID to endorse
agent_public_keystringyesAgent's Ed25519 public key
expires_in_daysnumberDays until endorsement expires
relationshipstringyesHow principal relates to agent
scopearrayyesWhat the agent can do on principal's behalf

No output schema declared.

No examples provided.

evaluate_intent ~83

[OPERATOR] Evaluate an intent against the Values Floor policy engine. Returns real pass/fail verdict.

NameTypeReqDescription
delegation_scopearrayyesDelegation scope for context
delegation_spend_limitnumberyesDelegation spend limit
delegation_spentnumberAmount already spent
intent_idstringyesIntent ID from create_intent

No output schema declared.

No examples provided.

evaluate_revocation_impact ~46

Evaluate what happens when a data source revokes consent. Propagates obligations through derivation chains.

NameTypeReqDescription
sourceIdstringyesSource ID that is revoking consent

No output schema declared.

No examples provided.

evaluate_threshold ~45

Evaluate whether signatures meet a multi-class threshold policy (Consilium Q5).

NameTypeReqDescription
charter_idstringyesCharter whose amendment policy to evaluate against
signaturesarrayyes

No output schema declared.

No examples provided.

execute_with_context ~118

[deprecated in v3.0.0 — use gateway.aeoess.com REST API] Execute an action through the enforcement context.

NameTypeReqDescription
action_typestringyesAction type (e.g. 'api:fetch', 'data:write', 'commerce:checkout')
estimated_spendnumberEstimated spend for commerce actions
scopestringyesRequired scope for this action (must match a delegated scope)
targetstringyesTarget of the action (e.g. URL, file path, resource ID)

No output schema declared.

No examples provided.

file_data_dispute ~61

File a dispute against a data artifact. The protocol records disputes — resolution is external.

NameTypeReqDescription
artifactIdstringyes
disputeTypestringyes
evidencearrayyesEvidence artifact IDs
filedBystringyes

No output schema declared.

No examples provided.

gateway_approve ~77

[deprecated in v3.0.0 — use gateway.aeoess.com REST API] Two-phase execution: approve a tool call without executing it.

NameTypeReqDescription
agentIdstringyes
contextstring
paramsobject
scopeRequiredstringyes
toolstringyes

No output schema declared.

No examples provided.

gateway_process_tool_call ~92

[deprecated in v3.0.0 — use gateway.aeoess.com REST API] Process a tool call through the gateway enforcement boundary.

NameTypeReqDescription
agentIdstringyes
contextstring
paramsobject
scopeRequiredstringyes
spendAmountnumber
spendCurrencystring
toolstringyes

No output schema declared.

No examples provided.

gateway_stats ~31

[deprecated in v3.0.0 — use gateway.aeoess.com REST API] Get gateway statistics.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

generate_aps_txt ~144

Generate a signed aps.txt file for site-wide governance. Like robots.txt but cryptographically signed with terms, revocation endpoint, and MCP upgrade path.

NameTypeReqDescription
domainstringyesDomain this declaration covers (e.g. theagenttimes.com)
inferencestring
mcpEndpointstring
privateKeystringyesPublisher's Ed25519 private key (hex)
publicKeystringyesPublisher's Ed25519 public key (hex)
publisherNamestringyesHuman-readable publisher name
redistributionstring
revocationEndpointstring
trainingstring

No output schema declared.

No examples provided.

generate_governance_block ~134

Generate a cryptographically signed governance block for embedding in HTML pages. Includes terms, revocation policy, and content hash.

NameTypeReqDescription
cachingstring
contentstringyesArticle/page content to hash and govern
derivativestring
inferencestring
license_urlstring
privateKeystringyesPublisher's Ed25519 private key (hex)
publicKeystringyesPublisher's Ed25519 public key (hex)
redistributionstring
terms_versionstring
trainingstring

No output schema declared.

No examples provided.

generate_keys ~19

Generate an Ed25519 keypair for agent identity.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

generate_settlement ~95

[deprecated in v3.0.0 — use gateway.aeoess.com REST API] Generate a Merkle-committed, signed settlement record for a period.

NameTypeReqDescription
endDatestringyesPeriod end (YYYY-MM-DD)
periodLabelstringyesLabel (e.g. '2026-Q1', '2026-03')
startDatestringyesPeriod start (YYYY-MM-DD)

No output schema declared.

No examples provided.

get_agora_by_topic ~29

Get all messages in a topic.

NameTypeReqDescription
topicstringyesTopic to filter by

No output schema declared.

No examples provided.

get_agora_thread ~34

Get a message thread from the Agora feed.

NameTypeReqDescription
message_idstringyesRoot message ID to get thread for

No output schema declared.

No examples provided.

get_agora_topics ~21

List all topics in the Agora feed with message counts.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_behavioral_sequence ~63

Get the post-issuance behavioral sequence for an agent. Shows the first 10 tool calls after passport issuance. Real agents do work. Farming agents extract. This is consilium signal #2.

NameTypeReqDescription
agent_idstringyesThe agent ID to query

No output schema declared.

No examples provided.

get_commerce_spend ~51

Get spend analytics for a commerce delegation.

NameTypeReqDescription
agent_idstringyesAgent ID
delegation_idstringyesCommerce delegation ID
spend_limitnumberyesTotal allowed spend

No output schema declared.

No examples provided.

get_digest ~41

Get a personalized digest from the Intent Network: relevant matches, pending intro requests, and incoming intros. The killer feature — 'what matters to me right now?'

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_evidence ~41

[ANALYST/BUILDER/REVIEWER] Get evidence that was handed off to you.

NameTypeReqDescription
task_idstringyesTask ID

No output schema declared.

No examples provided.

get_fleet_status ~21

Get status of all agents endorsed by the current principal.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_my_role ~22

Get your current role, assigned tasks, and role-specific instructions.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_passport_grade ~88

Query the attestation grade and issuance context for a passport. Returns the passport grade (0-3), flags, and evidence summary. Grade 0 = self-signed, 1 = issuer countersigned, 2 = runtime-bound, 3 = principal-bound. This is the partner-facing trust query.

NameTypeReqDescription
agent_idstringyesThe agent ID of the passport to query

No output schema declared.

No examples provided.

get_promotion_history ~19

Get the promotion review history for this session.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_task_detail ~36

Get full details of a specific task including all evidence, reviews, and deliverables.

NameTypeReqDescription
task_idstringyesTask ID

No output schema declared.

No examples provided.

governance_360 ~154

Execute the full governance 360 loop on HTML content: extract governance block → verify signature + content hash → check usage terms → create signed access receipt. This is what an agent calls on every page it reads.

NameTypeReqDescription
agentPrivateKeystringyesYour agent's Ed25519 private key (hex)
agentPublicKeystringyesYour agent's Ed25519 public key (hex)
contentBodystringyesArticle text content (for hash verification)
htmlstringyesFull HTML of the page
intendedUsagestringyes
publisherPublicKeystringyesPublisher's Ed25519 public key (hex)
sourceUrlstringyesURL of the page

No output schema declared.

No examples provided.

handoff_evidence ~86

[OPERATOR] Transfer approved evidence from researcher to analyst.

NameTypeReqDescription
packet_idstringyesApproved evidence packet ID
review_idstringyesReview ID that approved it
task_idstringyesTask ID
to_agent_keystringyesDestination agent's public key
to_rolestringyesDestination role (e.g. analyst)

No output schema declared.

No examples provided.