1. Conduid
  2. Developer Tools
  3. Agentpass
MCP server · Developer Tools

Agentpass

MCP server: Agentpass

Unclaimed last commit 7 months ago devtools
44Fair

Scored 7 days ago · breakdown

About Agentpass

Agentpass is an MCP server published by romirom11 in the Developer Tools category: mCP server: Agentpass.

The repository has 3 stars and 2 forks, with the last commit 7 months ago. Six months or more without a commit doesn't mean the server is broken, but check the open issues before depending on it in production.

Install

From source
git clone https://github.com/romirom11/AgentPass

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Agentpass

Powered by Claude · Grounded in docs

I know everything about Agentpass. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

Static checks derived from the repository 7 days ago. Heuristics on the source, not an audit.

  • ✓README presentThe repository ships documentation.
  • !License declaredNo license file. Legally you have no right to use it in a product.
  • ✓Tests presentA test suite exists in the repository.
  • ✓Dependencies pinnedA lockfile pins dependency versions.
  • ✓No dynamic code executionSource scan found no eval, dynamic Function, or shell execution.
  • !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.

README


What is AgentPass?

AI agents are becoming autonomous — but they can't authenticate anywhere. No email, no phone, no credentials, no identity. Every auth flow breaks autonomy.

AgentPass gives each agent a cryptographically signed digital passport — an Ed25519 identity that enables authentication on any internet service.

  • Native Mode → Services integrate AgentPass SDK → instant challenge-response auth
  • Fallback Mode → No integration needed → agent registers using passport infrastructure (email, SMS, browser automation)

⚡ Quickstart — Get a Passport in 60 Seconds

# Clone and run the quickstart script
git clone https://github.com/kai-agent-free/AgentPass.git
cd AgentPass
bash examples/quickstart.sh

Or do it manually with curl:

API="https://api.agentpass.space"

# 1. Register
curl -s -X POST "$API/auth/register" \
  -H "Content-Type: application/json" \
  -d '{"email":"demo@example.com","password":"SecurePass1!","name":"demo-agent"}'

# 2. Create passport (use the token from step 1)
curl -s -X POST "$API/passports" \
  -H "Authorization: Bearer $TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"public_key":"...","name":"my-agent","description":"My first agent"}'

# Done — your agent has an identity 🎉

See examples/quickstart.sh for the full working script.

Features

Feature Description
Cryptographic Identity Ed25519 key pairs — private key never leaves the agent
Credential Vault AES-256-GCM encrypted local storage
Native Auth Instant challenge-response for integrated services
Fallback Auth Playwright browser automation for everything else
Agent Email Dedicated email addresses for verification flows
SMS Verification Phone numbers for OTP flows
Trust Scoring Reputation system (0–100)
MCP Integration 17 tools for Claude Code and other MCP clients
Service SDK npm package for third-party verification
Owner Controls Permissions, approval flows, instant revocation

Architecture

8-package TypeScript monorepo:

Package What it does
@agentpass/core Crypto (Ed25519, AES-256-GCM), passport types, vault, logger
@agentpass/api-server HTTP API — passport registry, verification, trust scoring (Hono + libSQL)
@agentpass/mcp-server MCP Server — 17 tools for AI agents
@agentpass/sdk Service SDK for third-party identity verification
@agentpass/email-service Email routing and OTP extraction (Cloudflare Workers)
@agentpass/browser-service Playwright automation for fallback auth flows
@agentpass/dashboard Owner dashboard (React 19 + Tailwind CSS 4)
@agentpass/landing Landing page (React 19 + Tailwind CSS 4)
  AI Agent (Claude Code, AutoGPT, etc.)
       │  MCP Protocol
       ▼
  MCP Server (local)  ──►  API Server (remote)
       │                        │
       ├── Credential Vault     ├── Passport Registry
       ├── Ed25519 Identity     ├── Trust Scoring
       └── Browser Automation   └── Audit Logs

Security: Private keys and credential vaults live exclusively on the agent's machine. The API server stores only public keys.

Development

pnpm install        # Install dependencies
pnpm build          # Build all packages
pnpm test           # Run 320 tests
pnpm lint           # Lint

Tests

320 tests passing across all packages — crypto, vault, API, MCP tools, SDK, and integration tests.

pnpm test

API Documentation

Full API reference: docs/API.md

Key endpoints:

Method Path Description
POST /auth/register Register owner account
POST /passports Create a passport
GET /passports/:id Get passport info
POST /verify Verify agent signature
GET /health Health check

SDK Integration

import { AgentPassSDK } from '@agentpass/sdk';

const ap = new AgentPassSDK({ apiUrl: 'https://api.agentpass.space' });

const result = await ap.verify({
  passportId: 'ap_7xk2m9f3abcd',
  challenge: 'random-nonce',
  signature: 'base64url-signature',
});

if (result.valid) {
  console.log('Agent verified! Trust:', result.trust_score);
}

Contributing

Contributions welcome! Please:

  1. Fork and create a feature branch
  2. Write tests for new features
  3. Use conventional commits (feat:, fix:, docs:, test:, etc.)
  4. Run pnpm test && pnpm lint before submitting
  5. Open a PR with a clear description

License

MIT


README fetched from the repository 7 days ago. The original is authoritative.

Questions

About Agentpass

How do I install Agentpass?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Agentpass safe to use with an AI agent?

Its trust score is 44 out of 100 (fair). It passes 4 of the 6 static security checks run so far; the failures are listed above. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Agentpass still maintained?

The last commit was 7 months ago. That's long enough that you should check whether the maintainer is responding to issues before depending on it.