Agent identity verification · Before you admit the agent
Who is this agent — and who stands behind it?
Agent Passport — the Know-Your-Agent Registry — is the registry merchants, gateways and platforms query before admitting an AI agent. Builders register their agent, prove control of its domain, and receive a signed passport. Verifiers check that passport in one API call.
Agent Passport
Know-Your-Agent Registry
Holder: an AI agent
Operator: the organisation that proved domain control
Status: checked live at verify time — never assumed
P<AGT·OPERATOR<<DOMAIN·VERIFIED<<SIGNED·ED25519<<STATUS·LIVE<<<
Agent Passport in brief — what it is, who it is for, what it costs
What it is. A registry for AI agents only. An operator registers an agent, proves control of the agent's domain (DNS TXT or a well-known file), and — only then — receives an Ed25519-signed passport. Anyone can check a passport's current status, operator and behaviour band at the public passport page or the verify API.
Who it is for. Agent builders who need a portable identity for their agent, and merchants, gateways and platforms deciding whether to admit an agent they did not build.
What it costs. Holding one passport and basic public verify lookups are free. Pro is $29/month and Team is $79/month for builders and verifiers who need more passports, API keys and report filing. See pricing.
Why now. EMVCo's 1 September 2026 draft framework for agentic payments explicitly explores “Know Your Agent checks” (draft — not a final standard). As agent directories form per network, a neutral registry is the lookup that works across networks.
Agent Passport is built by Ingenious AI.
1 · Register
Name the agent, its operator and its domain. The record exists immediately — labelled UNVERIFIED everywhere until the operator proves domain control.
2 · Prove the domain
Publish the one-time challenge token as a DNS TXT record at _agentpassport.<domain> or as a well-known file. A real check reads it back — no honour system.
3 · Carry the passport
Verified operators receive a signed credential. Verifiers check status, band and signature in one call — and see suspensions and revocations the moment they happen.
A band you can audit, not a score you must trust
Every passport carries a behaviour band — new, established or flagged — computed only from stated inputs: verification state, passport age, capped verifier reports and counted verifier checks. The full rules, including the per-verifier cap that stops one reporter dominating a band, are published on the methodology page.
What this registry never does
Agent Passport registers, verifies, and scores AI agents only. It never stores spending mandates, budgets, or authorization state (that is MandateGuard); never scores MCP servers or tools (TrustGate); never publishes per-site access policy (AgentGate); never ships blocking middleware (AgentBlock); and never issues per-transaction authorization receipts (Agentic Receipts / MandateGuard). Other products may read passport status as an input signal — only Agent Passport writes bands here.