About Agentpass
Agentpass is an MCP server published by romirom11 in the Developer Tools category: mCP server: Agentpass.
The repository has 3 stars and 2 forks, with the last commit 7 months ago. Six months or more without a commit doesn't mean the server is broken, but check the open issues before depending on it in production.
Install
git clone https://github.com/romirom11/AgentPassThis server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Ask AI
Ask AI about Agentpass
Powered by Claude · Grounded in docs
Security checks
Static checks derived from the repository 7 days ago. Heuristics on the source, not an audit.
- ✓README presentThe repository ships documentation.
- !License declaredNo license file. Legally you have no right to use it in a product.
- ✓Tests presentA test suite exists in the repository.
- ✓Dependencies pinnedA lockfile pins dependency versions.
- ✓No dynamic code executionSource scan found no eval, dynamic Function, or shell execution.
- !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.
README
What is AgentPass?
AI agents are becoming autonomous — but they can't authenticate anywhere. No email, no phone, no credentials, no identity. Every auth flow breaks autonomy.
AgentPass gives each agent a cryptographically signed digital passport — an Ed25519 identity that enables authentication on any internet service.
- Native Mode → Services integrate AgentPass SDK → instant challenge-response auth
- Fallback Mode → No integration needed → agent registers using passport infrastructure (email, SMS, browser automation)
⚡ Quickstart — Get a Passport in 60 Seconds
# Clone and run the quickstart script
git clone https://github.com/kai-agent-free/AgentPass.git
cd AgentPass
bash examples/quickstart.sh
Or do it manually with curl:
API="https://api.agentpass.space"
# 1. Register
curl -s -X POST "$API/auth/register" \
-H "Content-Type: application/json" \
-d '{"email":"demo@example.com","password":"SecurePass1!","name":"demo-agent"}'
# 2. Create passport (use the token from step 1)
curl -s -X POST "$API/passports" \
-H "Authorization: Bearer $TOKEN" \
-H "Content-Type: application/json" \
-d '{"public_key":"...","name":"my-agent","description":"My first agent"}'
# Done — your agent has an identity 🎉
See examples/quickstart.sh for the full working script.
Features
| Feature | Description |
|---|---|
| Cryptographic Identity | Ed25519 key pairs — private key never leaves the agent |
| Credential Vault | AES-256-GCM encrypted local storage |
| Native Auth | Instant challenge-response for integrated services |
| Fallback Auth | Playwright browser automation for everything else |
| Agent Email | Dedicated email addresses for verification flows |
| SMS Verification | Phone numbers for OTP flows |
| Trust Scoring | Reputation system (0–100) |
| MCP Integration | 17 tools for Claude Code and other MCP clients |
| Service SDK | npm package for third-party verification |
| Owner Controls | Permissions, approval flows, instant revocation |
Architecture
8-package TypeScript monorepo:
| Package | What it does |
|---|---|
@agentpass/core |
Crypto (Ed25519, AES-256-GCM), passport types, vault, logger |
@agentpass/api-server |
HTTP API — passport registry, verification, trust scoring (Hono + libSQL) |
@agentpass/mcp-server |
MCP Server — 17 tools for AI agents |
@agentpass/sdk |
Service SDK for third-party identity verification |
@agentpass/email-service |
Email routing and OTP extraction (Cloudflare Workers) |
@agentpass/browser-service |
Playwright automation for fallback auth flows |
@agentpass/dashboard |
Owner dashboard (React 19 + Tailwind CSS 4) |
@agentpass/landing |
Landing page (React 19 + Tailwind CSS 4) |
AI Agent (Claude Code, AutoGPT, etc.)
│ MCP Protocol
▼
MCP Server (local) ──► API Server (remote)
│ │
├── Credential Vault ├── Passport Registry
├── Ed25519 Identity ├── Trust Scoring
└── Browser Automation └── Audit Logs
Security: Private keys and credential vaults live exclusively on the agent's machine. The API server stores only public keys.
Development
pnpm install # Install dependencies
pnpm build # Build all packages
pnpm test # Run 320 tests
pnpm lint # Lint
Tests
320 tests passing across all packages — crypto, vault, API, MCP tools, SDK, and integration tests.
pnpm test
API Documentation
Full API reference: docs/API.md
Key endpoints:
| Method | Path | Description |
|---|---|---|
POST |
/auth/register |
Register owner account |
POST |
/passports |
Create a passport |
GET |
/passports/:id |
Get passport info |
POST |
/verify |
Verify agent signature |
GET |
/health |
Health check |
SDK Integration
import { AgentPassSDK } from '@agentpass/sdk';
const ap = new AgentPassSDK({ apiUrl: 'https://api.agentpass.space' });
const result = await ap.verify({
passportId: 'ap_7xk2m9f3abcd',
challenge: 'random-nonce',
signature: 'base64url-signature',
});
if (result.valid) {
console.log('Agent verified! Trust:', result.trust_score);
}
Contributing
Contributions welcome! Please:
- Fork and create a feature branch
- Write tests for new features
- Use conventional commits (
feat:,fix:,docs:,test:, etc.) - Run
pnpm test && pnpm lintbefore submitting - Open a PR with a clear description
License
README fetched from the repository 7 days ago. The original is authoritative.