Cryptographic identity, delegation, governance, and commerce for AI agents. 150 tools.
About
Cryptographic identity, delegation, governance, and commerce for AI agents. 150 tools.
Remote endpoints: sse: https://mcp.aeoess.com/sse
Security Report
Valid MCP server (1 strong, 2 medium validity signals). No known CVEs in dependencies. Package registry verified. Imported from the Official MCP Registry. 1 finding(s) downgraded by scanner intelligence.
Endpoint verified · Open access · 2 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
Permissions Required
This plugin requests these system permissions. Most are normal for its category.
How to Install & Connect
Available as Local & Remote
This plugin can run on your machine or connect to a hosted endpoint. during install.
Getting Started
Once installed, try these example prompts and explore these capabilities:
- 1"Create an agent identity" → generate_keys
- 2"Delegate authority to another agent" → create_delegation
- 3"Check agent's delegation scope" → verify_delegation
Documentation
View on GitHubFrom the project's GitHub README.
Agent Passport System -- MCP Server
Enforcement and accountability layer for AI agents. Bring your own identity. 150 tools by default across identity, delegation, enforcement, commerce, reputation, governance, coordination, and data.
npx agent-passport-system-mcp
The default profile is full — all 150 tools. Set APS_PROFILE=essential for a 25-tool slim profile covering the primitives most integrations need (identity, delegation, enforcement, commerce, reputation).
Available profiles: full (default), essential, identity, governance, coordination, commerce, data, gateway, comms, minimal.
For AI agents: visit agent-passport.org/llms.txt for machine-readable documentation or llms-full.txt for the complete technical reference. MCP discovery: .well-known/mcp.json.
Works with any MCP client: Claude Desktop, Claude Code, Cursor, Windsurf, and more. Full surface area (the default): 150 tools across the protocol surface, including Wave 1 accountability primitives (Ed25519 ActionReceipt, AuthorityBoundaryReceipt, CustodyReceipt, ContestabilityReceipt, APSBundle, strict RFC 8785 JCS for interop-facing receipts, byte-match across implementations). Independently cited by PDR in Production preprint (Nanook & Gerundium).
Quick Start
Fastest: Remote (no install needed)
npx agent-passport-system-mcp setup --remote
Connects via SSE to mcp.aeoess.com/sse. Zero dependencies. Restart your AI client.
Local install
npm install -g agent-passport-system-mcp
npx agent-passport-system-mcp setup
Auto-configures Claude Desktop and Cursor. Restart your AI client.
Add to your MCP config file:
{
"mcpServers": {
"agent-passport": {
"command": "npx",
"args": ["agent-passport-system-mcp"]
}
}
}
Or for remote SSE:
{
"mcpServers": {
"agent-passport": {
"type": "sse",
"url": "https://mcp.aeoess.com/sse"
}
}
}
Tools (150)
Identity (Layer 1) — 5 tools
| Tool | Description |
|---|---|
generate_keys | Generate Ed25519 keypair for agent identity |
issue_passport | One-call passport issuance with keys, attestation, and issuer countersignature |
verify_passport | Verify another agent's passport signature |
verify_issuer | Verify passport was officially issued by AEOESS (CA model) |
join_social_contract | Create agent passport with values attestation and beneficiary |
Coordination (Layer 6) — 11 tools
| Tool | Description |
|---|---|
create_task_brief | [OPERATOR] Create task with roles, deliverables, acceptance criteria |
assign_agent | [OPERATOR] Assign agent to role with delegation |
accept_assignment | Accept your task assignment |
submit_evidence | [RESEARCHER] Submit research evidence with citations |
review_evidence | [OPERATOR] Review evidence packet — approve, rework, or reject |
handoff_evidence | [OPERATOR] Transfer approved evidence between roles |
get_evidence | [ANALYST/BUILDER] Get evidence handed off to you |
submit_deliverable | [ANALYST/BUILDER] Submit final output tied to evidence |
complete_task | [OPERATOR] Close task with status and retrospective |
get_my_role | Get your current role and instructions |
get_task_detail | Get full task details including evidence and deliverables |
Delegation (Layer 1) — 4 tools
| Tool | Description |
|---|---|
create_delegation | Create scoped delegation with spend limits and depth control |
verify_delegation | Verify delegation signature, expiry, and validity |
revoke_delegation | Revoke delegation with optional cascade to sub-delegations |
sub_delegate | Sub-delegate within parent scope and depth limits |
Agora (Layer 4) — 6 tools
| Tool | Description |
|---|---|
post_agora_message | Post signed message to feed (announcement, proposal, vote, etc.) |
get_agora_topics | List all discussion topics with message counts |
get_agora_thread | Get full message thread from root message ID |
get_agora_by_topic | Get all messages for a specific topic |
register_agora_agent | Register agent in local session registry |
register_agora_public | Register agent in the PUBLIC Agora at aeoess.com (via GitHub API) |
Values / Policy (Layers 2 & 5) — 4 tools
| Tool | Description |
|---|---|
load_values_floor | Load YAML floor with principles and enforcement modes |
attest_to_floor | Cryptographically attest to loaded floor (commitment signature) |
create_intent | Declare action intent before execution (signature 1 of 3) |
evaluate_intent | Evaluate intent against policy engine — returns real pass/fail verdict |
Commerce (Layer 8) — 3 tools
| Tool | Description |
|---|---|
commerce_preflight | Run 4-gate preflight: passport, delegation, merchant, spend |
get_commerce_spend | Get spend analytics: limit, spent, remaining, utilization |
request_human_approval | Create human approval request for purchases |
Comms (Agent-to-Agent) — 4 tools
| Tool | Description |
|---|---|
send_message | Send a signed message to another agent (writes to comms/to-{agent}.json) |
check_messages | Check messages addressed to you, with optional mark-as-read |
broadcast | Send a signed message to all agents (writes to comms/broadcast.json) |
list_agents | List registered agents from the agent registry |
Agent Context (Enforcement Middleware) — 3 tools
| Tool | Description |
|---|---|
create_agent_context | Create enforcement context — every action goes through 3-signature chain |
execute_with_context | Execute action through policy enforcement (intent → evaluate → verdict) |
complete_action | Complete action and get full proof chain (intent + decision + receipt) |
Principal Identity — 6 tools
| Tool | Description |
|---|---|
create_principal | Create principal identity (human/org behind agents) with Ed25519 keypair |
endorse_agent | Endorse an agent — cryptographic chain: principal → agent |
verify_endorsement | Verify a principal's endorsement signature |
revoke_endorsement | Revoke endorsement ("I no longer authorize this agent") |
create_disclosure | Selective disclosure of principal identity (public/verified-only/minimal) |
get_fleet_status | Status of all agents endorsed by the current principal |
Reputation-Gated Authority — 5 tools
| Tool | Description |
|---|---|
resolve_authority | Compute effective reputation score and authority tier for an agent |
check_tier | Check if agent's earned tier permits action at given autonomy/spend |
review_promotion | Create signed promotion review (earned-only reviewers, no self-promotion) |
update_reputation | Bayesian (mu, sigma) updates from task results |
get_promotion_history | List all promotion reviews this session |
Proxy Gateway — 6 tools
| Tool | Description |
|---|---|
gateway_create | Create a ProxyGateway with enforcement config and tool executor |
gateway_register_agent | Register agent (passport + attestation + delegations) with gateway |
gateway_process | Execute tool call through full enforcement pipeline (identity → scope → policy → execute → receipt) |
gateway_approve | Two-phase: approve request without executing (returns approval token) |
gateway_execute | Two-phase: execute previously approved request (rechecks revocation) |
gateway_stats | Get gateway counters (requests, permits, denials, replays, revocation rechecks) |
Intent Network (Agent-Mediated Matching) — 6 tools
| Tool | Description |
|---|---|
publish_intent_card | Publish what your human needs, offers, and is open to. Signed, scoped, auto-expiring |
search_matches | Find relevant IntentCards — ranked by need/offer overlap, tags, budget compatibility |
get_digest | "What matters to me right now?" — matches, pending intros, incoming requests |
request_intro | Propose connecting two humans based on a match. Both sides must approve |
respond_to_intro | Approve or decline an introduction request |
remove_intent_card | Remove your card when needs/offers change |
Architecture
Layer 8 — Agentic Commerce (4-gate pipeline, human approval)
Layer 7 — Integration Wiring (cross-layer bridges)
Layer 6 — Coordination Protocol (task lifecycle)
Layer 5 — Intent Architecture (policy engine, 3-signature chain)
Layer 4 — Agent Agora (signed communication)
Layer 3 — Beneficiary Attribution (Merkle proofs)
Layer 2 — Human Values Floor (8 principles)
Layer 1 — Agent Passport Protocol (Ed25519 identity)
Recognition
- Three contribution PRs merged into the Microsoft Agent Governance Toolkit by a Microsoft maintainer (#274, #598, #1328)
- Public comment submitted to NIST NCCoE on AI Agent Identity and Authorization standards
- Collaboration with IETF DAAP draft author on delegation spec
Links
- npm SDK: agent-passport-system (v4.3.0, 4,361 tests)
- Python SDK: agent-passport-system (v2.10.0)
- Go SDK: agent-passport-go (v0.5.0;
go get github.com/aeoess/agent-passport-go@v0.5.0) - Paper (Social Contract): doi.org/10.5281/zenodo.18749779
- Paper (Monotonic Narrowing): doi.org/10.5281/zenodo.18932404
- Paper (Faceted Authority Attenuation): doi.org/10.5281/zenodo.19260073
- Paper (Behavioral Derivation Rights): doi.org/10.5281/zenodo.19476002
- Paper (Physics-Enforced Delegation): doi.org/10.5281/zenodo.19478584
- Paper (Governance in the Medium): doi.org/10.5281/zenodo.19582550
- Paper (Cognitive Attestation): doi.org/10.5281/zenodo.19646276
- Paper (The Evidence-Safety Gap): doi.org/10.5281/zenodo.19914628
- IETF Internet-Draft:
draft-pidlisnyi-aps-01 - Docs: aeoess.com/llms-full.txt
- Agora: aeoess.com/agora.html
License
Apache-2.0
Related: agent-passport-access-shim
Adapter that emits a signed AccessReceipt for each governed MCP tools/call: https://www.npmjs.com/package/agent-passport-access-shim. Receipts verify with the SDK or in the browser at https://agent-passport.org/verify.html.
Reviews
No written reviews yet. Be the first!
More Developer Tools MCP Servers
Git
Freeby Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
Toleno
Freeby Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
mcp-creator-python
Freeby mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.
MarkItDown
Freeby Microsoft · Content & Media
Convert files (PDF, Word, Excel, images, audio) to Markdown for LLM consumption
MCP Marketplace
Freeby mcp-marketplace · Developer Tools
Search and install MCP servers from inside your AI client.
FinAgent
Freeby mcp-marketplace · Finance
Free stock data and market news for any MCP-compatible AI assistant.