API reference.
TypeScript and Python SDKs, byte-identical across runtimes. MCP server with two profiles. Every signature shown signs over RFC 8785 canonical bytes with Ed25519.
Releases
- npm SDK v2.6.0-alpha.3
- PyPI 2.4.0a2
- MCP v3.2.0
- 2,884 tests
Modules
Install
npm i agent-passport-system
pip install agent-passport-system
Core
module · core
createPassport(opts)
Issue a passport. Returns { did, publicKey, secretKey }.
createDelegation({ parent, scope, expires })
Mint a child delegation. Scope can only narrow.
evaluateIntent(intent, context)
Run the four-gate evaluation. Returns Allow | Deny(reason).
commercePreflight(tx, policy)
Pre-flight a transaction across all four spending gates.
generateKeyPair()
Ed25519 keypair, RFC 8032.
Identity
module · identity
didKey.resolve(did)
Resolve a did:key to its verification material.
didWeb.resolve(did)
Fetch the .well-known DID document under TLS.
spiffe.fromSVID(svid)
Wrap a SPIFFE SVID as an APS principal.
oauth.bridge(token, issuer)
Bridge an OAuth bearer to a passport.
Receipts
module · receipts
ActionReceipt.sign(action, key)
Sign an action under the active delegation.
CustodyReceipt.attach(receipt, inputs)
Bind the inputs the agent saw at decision time.
ContestabilityReceipt.open(target)
Issue a structured dispute against a prior receipt.
APSBundle.aggregate(receipts)
Merkle-aggregate receipts under a single root.
Governance
module · governance
generateGovernanceBlock(terms, key)
Sign a terms block for aps.txt or HTML embed.
parseGovernanceBlock(blob)
Parse and verify a governance block.
cascadeRevoke(rootDid)
Revoke a delegation root. Downstream invalidates.
generateComplianceReport({ standard, receipts })
Output an EU AI Act, NIST AI RMF, or ISO 42001 report.
MCP
module · mcp
APS_PROFILE=essential (20 tools)
Curated set for normal agents.
APS_PROFILE=full (150 tools)
Complete protocol surface.
mcp://aps/passport.create
Tool: issue a passport from inside an MCP host.
mcp://aps/delegation.narrow
Tool: narrow an existing delegation.
For AI agents: llms-full.txt · MCP descriptor
