Agent Passport runs on your own machine — the client starts it, so there is no endpoint to ping. 177 installs a week from npm. Last commit 19 Oct 2026.
Post-quantum (ML-DSA-65/FIPS-204) agent identity + AI-decision receipts, verifiable offline.
What the code does
We read the source, 2 d ago · rules 995398eba69f
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
"FMWh8mdZwLeDFXieFNpSSD2+JRvBmii+pVK8gwhWuS4IYcUYV+k+GHhKMr2wx0FW1C89TIjdq2dLeDQafyhyHUFEnUOyb02nO/Q81ku9VPU66OlFEAkAp042iFq6qrrWT0GMVQVTonzvuYRb5KOyMjqmCyLgx/ccWbq57AkIsHbGD1NCLvZNhN4IfXep4GVs0fxOgG/uAvrO6x6KWyA0rOB1Zk1HFJw2T9dtLRhGMhGx1XOZgAHRdrT0vj3EWKrjF6TG3z0Em8s0+G0bS7Hnx…
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
This code can reach further than it looks
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
Connect this server
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add agent-passport -- npx -y @fractalai/agent-passport-mcp{
"mcpServers": {
"agent-passport": {
"command": "npx",
"args": [
"-y",
"@fractalai/agent-passport-mcp"
]
}
}
}[mcp_servers.agent-passport]
command = "npx"
args = ["-y", "@fractalai/agent-passport-mcp"]{
"mcpServers": {
"agent-passport": {
"command": "npx",
"args": [
"-y",
"@fractalai/agent-passport-mcp"
]
}
}
}{
"servers": {
"agent-passport": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@fractalai/agent-passport-mcp"
]
}
}
}Optional settings from the registry entry, left out of the block above:
FRACTALAI_BASE_URL (Override the FractalAI web endpoint base (defaults to https://fractalai.net.co)), FRACTALAI_RPC_URL (Override the FractalAI JSON-RPC node URL (defaults to https://api.fractalai.net.co)), FRACTALAI_PINNED_RECEIPT_KEY (Pin a specific base64 ML-DSA-65 receipt-signing public key instead of resolving it from the published key directory), AGENT_PASSPORT_AUTODEMO (Set to 0 to skip the live demo call made on first start).
Alternatives to Agent Passport
same job, measured the same wayPost-quantum, tamper-evident receipts for agent actions. Ed25519 + ML-DSA-65, offline verify.
Post-quantum (ML-DSA-65/Dilithium-3) proof, provenance & AI-decision receipts, paid via x402.
Cryptographic identity for AI agents: W3C DIDs, Verifiable Credentials, post-quantum crypto
Verifiable decision records for AI agents: signed receipts for calls to its own governed tools.
Quantum-safe vault, encryption & compliance for AI agents. NIST FIPS 203/204 ML-KEM-768 + ML-DSA-65.
Etch is a signed audit chain for AI agent decisions, offline-verifiable against pinned public keys.
Verifiable agent memory with signed ledger receipts — verify every write offline.
Tamper-proof audit trail for AI agents. Signed receipts, offline-verifiable, zero backend.
Agent Passport — questions
Answers built from our own checks of this server.