AgentPassport

The supplied research confirms a maintained open agent-trust protocol with software libraries and a draft specification, plus well-funded proprietary agent-identity products. It finds no reviewed commercial managed issuer for the open protocol, but adoption, interoperability and demand for an independent trust anchor remain unproven.

AgentPassport registers an organization, verifies an authorized issuer administrator, mints a signed credential for an agent and records bounded delegation, expiry and revocation. Downstream verifiers receive cryptographic validity and policy context; they still decide whether a particular action is permitted.

Organization verification, issuer authorization, key custody, agent registration, credential issuance, delegation, presentation, verification, policy evaluation, action approval, execution and revocation readback remain separate. A valid signature proves control of a key under the recorded scheme, not who operated the agent or whether its request is safe.

The first release should pilot verifier-only interoperability and short-lived sandbox credentials. It excludes global identity claims, financial authorization, autonomous key recovery and production trust-anchor status before independent security review.

Identity, platform-security or agent-governance leader at an enterprise that needs verifiable machine delegation across independently operated tools