Agent Passport System Puts Authority On Wire

API keys prove possession, not permission or accountability. APS points toward a more durable security model for agents that can spend money, access data, and trigger real-world systems.

• –Ed25519 identities connect each action to a specific agent and principal
• –Delegation chains narrow permissions across scope, budget, time, and reversibility
• –Gateway checks can deny unauthorized actions before they reach enterprise APIs
• –Signed receipts create portable evidence for audits, disputes, and incident response
• –MCP and OAuth bindings make the protocol relevant to existing agent stacks.