Agent Passport MCP

What aeoess/agent-passport-mcp MCP server does

The aeoess/agent-passport-mcp MCP server adds an identity and accountability layer for MCP clients. It can generate Ed25519 keypairs, issue signed agent passports, verify issuer signatures, and report an agent's attestation grade. Passport grades range from 0 for self-signed identity to 3 for principal-bound identity, with intermediate levels for issuer countersigning and runtime binding.

It also models authority between agents. Delegations can be scoped, verified, revoked, and sub-delegated within the parent scope and depth limits. The server exposes policy and gateway operations for registering agents, checking identity and scope, approving requests, executing approved calls, and producing enforcement statistics.

How it works

The aeoess/agent-passport-mcp MCP server runs as an MCP process through npm or can be reached through the documented remote SSE endpoint. Its default profile exposes the full tool surface; narrower profiles reduce the available tools for a particular integration. APS_PROFILE=essential selects a 25-tool set, while profiles such as identity, coordination, governance, commerce, data, gateway, comms, and minimal target specific areas.

A typical identity flow starts with key generation or one-call passport issuance. Other agents or services can verify the passport and its AEOESS issuer countersignature. Delegation tools then establish authority boundaries, while gateway tools apply identity, scope, policy, execution, and receipt steps to a request.

Setup and configuration

Run the package locally with npx -y agent-passport-system-mcp. The README also documents a setup command that can configure Claude Desktop and Cursor, plus a remote mode using https://mcp.aeoess.com/sse. Manual MCP configuration uses the agent-passport-system-mcp package as the stdio server command.

Set APS_PROFILE before starting the server when the default full profile is too broad. No other required environment variable is documented in the supplied material.

Tools and capabilities

The tool surface includes capabilities for:

• Generating keys, issuing passports, checking issuer signatures, and reading passport grades.
• Creating, verifying, revoking, and sub-delegating scoped authority.
• Creating task briefs, assigning roles, submitting and reviewing evidence, handing off approved evidence, and completing tasks.
• Posting signed Agora messages and reading topics, threads, and topic feeds.
• Creating enforcement contexts, evaluating intents, processing gateway requests, and completing actions with proof chains.
• Managing principals, endorsements, selective disclosures, reputation tiers, and promotion history.
• Sending signed agent-to-agent messages and listing registered agents.

Limitations and notes

The README describes 152 tools in the default profile, while individual supplied listings may show a smaller subset. Tool availability therefore depends on the selected profile and the server version. The package version noted in the README is 6.0.0 for SDK 6.0.0, with 5.0.2 targeting SDK 5.x.

The documented remote option uses SSE, whereas local execution uses stdio. Some operations are role-restricted, including operator, researcher, analyst, builder, and reviewer actions. The material does not document a required API key or a specific open-source license.