AgentPass

Provides an AI agent certificate authority and control plane that issues verifiable X.509/SPIFFE passports, signs every agent action, and enforces graduated trust levels with spend limits to prevent unauthorized spending, deployment or deletion by autonomous agents. Serves developers, IT and security teams building agent workflows in B2B organizations. Delivered as infrastructure API and SaaS with HSM-backed CA, short-lived certificates, per-call signing and hash-chained evidence ledger, positioned as a passport-based alternative to API keys.

Key features

• SPIFFE-enabled X.509 certificates
• Short-lived 24h certificates
• HSM-backed certificate authority
• Instant certificate revocation
• Per-action MCPS signing
• Replay protection per call
• Tool-hash pinning
• Graduated L0-L4 trust levels
• Trust-gated scopes
• Per-transaction spend limits
• Daily spend limits
• Behavioural monitoring AEBA
• Kill switch for agents
• Hash-chained audit trail
• Tamper-evident evidence ledger
• Sanctions screening