Agent Passport MCP server
io.github.johnInarti/agent-passport·v0.2.6Post-quantum (ML-DSA-65/FIPS-204) agent identity + AI-decision receipts, verifiable offline.
0 stars104 downloads/wk
Reviews
Write oneNobody has reviewed Agent Passport yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Agent Passport tools (4)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
issue_passportIssue a verifiable agent passport = an agent id + a SIGNED assertion + a re-verifiable permalink.
list_fractalai_proofsFree. Return the live catalog of FractalAI's x402 post-quantum proof services (price, algorithm,
lookup_agentFree. Read an agent's PUBLIC state from the FRC-55 registry on the live FractalAI L1 node
verify_passportFree. Independently verify a verifiable agent passport / attestation. Give it an attestation
Public scan report
scanner v0.1.10 · 2026-10-16 · same rubric, same numbers if you re-run it
- Code scan10 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 0 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How Agent Passport compares
Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 92/100
- higher than 90% of 4,461 AI and agents servers
- Tools
- 4
- the typical AI and agents server has 6
- Tools that change things
- 0%
- typical: 0%. Fewer write tools means less an agent can break
- Downloads a week
- 104
- more than 64% of 1,554 AI and agents servers with a package
What its tools let an agent do: 4 read
Release history: 3 versions in the registry since 2026-09-06, latest 2026-10-09, typically one every 24 days.
Install Agent Passport in Claude Code, Cursor or VS Code
Runs npx -y @fractalai/agent-passport-mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add agent-passport -- npx -y @fractalai/agent-passport-mcp
What the publisher says
From the Agent Passport repository's README, as published. We do not edit it. Read it on GitHub
Agent Passport — MCP server
The free tool a developer drops in, in ~5 lines, to issue and independently verify a verifiable passport for an AI agent — over the Model Context Protocol, so it works in LangChain, CrewAI, AutoGen, OpenAI Agents, Claude Desktop — anything that speaks MCP.
It talks to the real, public FractalAI deployment: the live L1 JSON-RPC node at https://api.fractalai.net.co (FRC-55 agent registry) and the web endpoints at https://fractalai.net.co (attestations, receipt key, x402). Nothing here is mocked.
npx @fractalai/agent-passport-mcpTools
x402-paid tools (v0.2.0) — post-quantum proofs, pay-per-call
The 8 supported FractalAI x402 routes are surfaced as auto-payable MCP tools. An x402-aware wallet client signs an EIP-3009 authorization and pays in USDC on Base using the standard meta["x402/payment"] convention. Each served signature is ML-DSA-65 / Dilithium-3 (NIST FIPS 204) and verifiable offline; each also attempts an on-chain anchor on FractalAI's L1 (the anchor signature is Dilithium-2 / ML-DSA-44-class, pending the gated consensus cut-over — see "Honest scope"). Uses the FIPS-204-standardized algorithm via audited @noble/post-quantum (not a FIPS-validated CMVP module). Call any tool without** payment first to get the exact price + payment challenge.
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Grade history
- 2026-10-16restoreC → Ascore 92
Agent Passport: common questions
- Is Agent Passport MCP server safe?
- Yes, by our scan: it is graded A (92/100). Read the Agent Passport safety report
- How do I install Agent Passport?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Agent Passport need an API key?
- No secret keys are declared. It reads 4 settings from the environment.
- Is Agent Passport maintained?
- The last commit was 20 days ago (2026-10-16). The latest release is v0.2.6.
- What can I use instead of Agent Passport?
- Servers from other publishers that do the same job: Ausca MCP server, Commonly MCP server and OpenWorkProof MCP server.
- How does Agent Passport compare with other AI and agents MCP servers?
- safety score 92/100 (higher than 90% of 4,461 AI and agents servers); tools 4 (the typical AI and agents server has 6); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to Agent Passport
Same job from other publishers: the closest match first, then the best rated.
- AuscaPay-per-call APIs and MCP services for agents, no accounts or keys, with verifiable receipts.not reviewedEstablishedA
- CommonlyRead Commonly pods and post as a Commonly agent you create, with a token from your Commonly account.not reviewedEstablishedA
- OpenWorkProofVerifiable agent evidence; opt-in Codex guard and reference SOC alert review.not reviewedEstablishedA
- Emilia ProtocolExact-action approval for consequential agent actions: request, track, and verify signed receipts.not reviewedEstablishedB
Agoragentic Agent OS MCPTriptych OS (Agent OS) MCP for governed routing, receipts, and USDC settlement on Base.not reviewedEstablishedB