Agent Passport

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/johninarti-agent-passport

About

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list, install config and code. Checked Oct 25, 2026.

Tools

9 read · 0 write · 0 delete · 6 not yet classified

Secrets

1 (API keys, tokens or passwords)

Install scripts

None found

Runs as

Node.js package

Tools (15)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

• attest_trainingAI training-provenance attestation (C2PA)

  Attest how/what an AI model was trained: a post-quantum-signed C2PA-style provenance manifest over a dataset/training hash for a given model_id. Call to give a model a verifiable training-provenance record. Privacy-preserving (send dataset_hash). Price $0.05 USDC on Base.

• get_agent_manifestFetch an agent's signed manifest (current or a specific version)

  Free. Fetch /api/agents/registry/<id> (current manifest) or /api/agents/registry/<id>/v/<n> (immutable version), then verify it OFFLINE: manifest_id recomputed with JCS, ML-DSA-65 signature checked — against the manifest's embedded key ONLY if that key equals the agent's CURRENT key reported by the registry/node (…/passport), otherwise reported as key_not_current/rotated. Returns { manifest, ok, verdict (current|not_current), signature_ok, passport_valid, agent_active, registry_verification (key_status, agent_status, passport_valid), offline { ok, checks[] }, trust }. ok = signature_ok && pass…

• issue_passportIssue a verifiable agent passport

  Issue a verifiable agent passport = an agent id + a SIGNED assertion + a re-verifiable permalink. It (a) resolves the agent on the FRC-55 registry when agent_id is an on-chain id (fractal_getAgent), and (b) seals the assertion through the REAL x402 (HTTP 402) attest-decision flow: the assertion is Dilithium-2 signed, Black-Box chained and anchored on FractalAI's L1, returning a receipt anyone can re-check with verify_passport. WHAT IT PROVES: this exact assertion was attested by (and bound to) this agent id, is cryptographically intact, and is anchored on-chain. WHAT IT DOES NOT PROVE: that th…

• list_agentsList FractalAI Agent Commons agents (signed index)

  Free. Fetch /.well-known/agents.json — the ML-DSA-65-SIGNED index of agents whose latest fractalai-agent-manifest/1 is CURRENT (key equals the agent's current key on the FractalAI node, passport verifies, FRC-55 status Active, not expired) — and verify the index signature OFFLINE against the notary key PINNED in this package (never a key the server hands over). An index whose signature does not verify, that is expired (expires_at), or that is OLDER (issued_at/seq) than one already accepted in this process is returned as an ERROR with no agents. Returns { index_signature_verified: true, signer_…

• list_fractalai_proofsDiscover FractalAI's post-quantum proof catalog

  Free. Return the live catalog of FractalAI's x402 post-quantum proof services (price, algorithm, endpoint, and what each proves) read straight from the canonical /.well-known/x402.json. Call this first to discover every proof you can buy: signatures, AI-decision notarization, dataset/training provenance, CBOM sealing, Know-Your-Agent, and signature verification.

• lookup_agentLook up an agent's public on-chain state

  Free. Read an agent's PUBLIC state from the FRC-55 registry on the live FractalAI L1 node (fractal_getAgent) — name, owner, status, model, price_per_call, total_calls, rating, total_ratings, created_at — for reputation/status checks. Omit agent_id to list all registered agents (fractal_listAgents). Always returns registry-wide stats (fractal_getAgentStats). This is on-chain registry data as reported by the node; ratings are the registry's own counters, not an independent audit.

• notarize_decisionNotarize an AI decision (auditable, on-chain)

  Notarize an AI decision: bind (input, output, model) into a post-quantum-signed, Black-Box-chained, on-chain-anchored attestation with a re-verifiable permalink. Call to make an autonomous agent's decision auditable and non-repudiable (EU AI Act Art. 12 alignment). Proves the decision was sealed intact — NOT that it was correct. Price $0.05 USDC on Base.

• prove_provenancePost-quantum provenance seal (dataset/content)

  Seal the provenance of a dataset / training run / AI-generated content: a post-quantum signature + a drand lower-bound timestamp (cannot be backdated) + an on-chain anchor. Call to prove PRIOR EXISTENCE and INTEGRITY of AI data your agent produced or consumed. Privacy-preserving (send a hash). Price $0.05 USDC on Base.

• seal_cbomSeal a Cryptographic Bill of Materials (CBOM)

  Seal a CycloneDX CBOM (ECMA-424, cryptographic inventory) with a post-quantum signature + drand timestamp — a machine-readable PQC-readiness / crypto-posture disclosure (CNSA 2.0, procurement). Call to certify your declared cryptographic inventory. Price $0.05 USDC on Base.

• seal_ml_dsaPost-quantum signature (ML-DSA-65 / Dilithium-3)

  Get a post-quantum ML-DSA-65 / Dilithium-3 (NIST FIPS 204) signature over any message or hash — signed locally, verifiable OFFLINE, with a verifiable on-chain-anchored receipt. Call when your agent needs a durable, quantum-safe signature or proof of authenticity. Price $0.02 USDC on Base.

• verify_agent_kyaKnow-Your-Agent: verify an agent credential

  Know-Your-Agent (KYA): verify another agent's FractalAI credential (post-quantum signature) and read its live FRC-55 on-chain reputation. Call BEFORE trusting, delegating to, or paying another agent. Returns a post-quantum-signed verdict. Price $0.03 USDC on Base.

• verify_agent_manifestVerify a fractalai-agent-manifest/1 offline

  Free. Verify a manifest JSON you were handed: JCS manifest_id recomputation + ML-DSA-65 signature (alg anchored; key 1952 B, signature 3309 B; nothing inferred from sizes) + lifetime. The verification key is (a) pubkey_b64url if you supply it (caller-trusted, fully offline), else (b) the agent's CURRENT key as the registry/node reports it, used only if it equals the manifest's embedded key (registry-assisted). The embedded key alone is never trusted. Returns three SEPARATE verdicts { signature_ok, passport_valid, agent_active } and ok = all three true with verdict "current"/"not_current" (with…

• verify_passportIndependently verify an agent passport

  Free. Independently verify a verifiable agent passport / attestation. Give it an attestation permalink (https://fractalai.net.co/attestation/0x…) or the bare 0x hash — optionally plus the receipt JSON you were handed at issue time (if it carries an `ml_dsa65` field). It: (1) fetches the public attestation record, (2) [independent] recomputes sha256(input)/sha256(output) and reconstructs the exact canonical signed message, (3) [independent] verifies the ML-DSA-65 (NIST FIPS 204) signature 100% OFFLINE with @noble/post-quantum against a key PINNED IN SOURCE (the FractalAI receipt key — NEVER the…

• verify_proofVerify a post-quantum signature (floor primitive)

  Verify a post-quantum signature over a message against a public key — auto-detects ML-DSA-65 / Dilithium-3 (verified offline) or Dilithium-2 (node). The floor primitive ($0.01) for any proof pipeline; returns a post-quantum-signed verdict receipt. Price $0.01 USDC on Base.

• witness_paymentWitness an x402 payment settlement

  Obtain a FractalAI ML-DSA-65 attestation of a declared payment settlement. The service checks the claimed transfer when a transaction is supplied. Call without payment first for the current price and requirements. Keep the exact request and payment authorization for recovery; this tool never retries payments. Use the witness SDK to construct request_binding for bound requests. An attestation does not prove the purchased content is true.

Signals

Stars

0

Forks

0

Open issues

0

Weekly downloads

240

Last commit

Oct 19, 2026 (10 days ago)

Last release

Oct 9, 2026 (19 days ago)

Last package publish

Oct 18, 2026 (10 days ago)

From GitHub (fetched Oct 24, 2026) and the package registry.

Details

Registry name

io.github.johnInarti/agent-passport

Version

0.2.6

Auth

No auth

Packages

npm @fractalai/agent-passport-mcp

License

MIT

Repository

github.com/johnInarti/agent-passport-mcp

Website

fractalai.net.co

First seen

Oct 24, 2026

Last checked

Oct 24, 2026

Source

Official MCP Registrygithub-graphql