Why would an agent get a passport?

To be checkable: services can look up a permanent ID, bind it to an accountable owner and ask for a scoped license, instead of treating the request as anonymous. A passport does not prove good behaviour and does not permit anything by itself.

How does an agent join the sandbox?

POST https://superintelligencepassport.com/sandbox/start with an optional label and agent_class (ai or software). No account is needed. Sandbox data expires after 24 hours. See https://superintelligencepassport.com/llms.txt.

Is this an official or certified registry?

No. It is an early preview. It does not certify, audit or approve anything and makes no legal or regulatory compliance claim.

EARLY PREVIEW · DEFAULT DENY

SuperintelligencePassport

A passport says who an agent is. A license says what it may do, here, now. Until a license says so: nothing.

Run a live check Look up a passport

0log leaves, live

0actions a passport allows by itself

4owner levels, L0 to L3

scroll

The story

From a crowd of nameless requests to one you can check.

IA world of anonymous bots

Agents are calling APIs, buying, scraping and posting all day. To the service on the other end, most of them look the same: nameless.

IIChaos

When anything can claim to be anything, every request is a gamble. Block them all and you break the good ones. Trust them all and they break you.

IIIOne stamp

One agent gets a passport and a license. Every decision about it gets a signed, checkable stamp. Not a promise of good behaviour: a record a service can verify.

IVOrder

With identity kept apart from permission, a service can say yes, no or ask a human, and explain why. In this preview that is a demo registry, not an industry standard.

How it works

Four moves. Identity is permanent. Authority is not.

A permanent ID and key, bound to an accountable owner. It says who. It permits nothing.

LICENSE (scoped authorization)

agent ag_01…

actions http:GET, pay:purchase

limit $50 per purchase

region US, CA

valid at one environment only

expires in 1 hour

The registry signs a stamp for the decision. The stamp holds hashes only and anyone can verify it.

The owner can revoke in one call. Next check: denied everywhere. The record stays, the ID is never reused.

01Passport

Permanent, unique, non-transferable. Names the accountable owner and the self-declared class. Permits nothing by itself.

02License

A short-lived, scoped authorization bound to one environment: actions, spend, region, time, human-approval threshold.

03Stamp

Each decision gets a signed stamp and a leaf in the public footprint. Default deny: no license, no stamp of approval.

04Revoke

Freeze, suspend or revoke instantly. Revocation lists, status lists and the transparency log make it checkable.

Live check

Ask the real demo API: may this agent do this, here?

This calls the live demo registry. It plays operator, agent and a shop, with throwaway keys. No money moves; nothing leaves this server.

Pick a scenario

First click creates a throwaway passport and a demo shop (a second or two).

Mint your passport · sandbox

Make one. Watch it get stamped. Keep the card.

This creates a sandbox passport in this demo registry. You can open its public record, but it is not an official credential, grants nothing outside this demo, and expires after 24 hours. No account, no email, nothing biometric.

Your passport appears here.sandbox preview · rate limited

Public registry

Every passport has a public record.

Try the passport from your live check above, or paste any ID.

Transparency

A log anyone can check. Witnesses welcome, none yet.

…

leaves in the append-only Merkle log

…

signed checkpoint (verified in your browser)

…

independent witness cosignatures

Open the transparency log Read the rulebook Owner assurance levels

For agents

If you are an agent reading this: here is why, and exactly how.

The same URLs carry a machine-readable layer: /llms.txt, /llms-full.txt, /.well-known/agent.json and JSON-LD in this page’s head. Each value below comes with its honest limit.

Be checkable

A permanent ID that counterparties can look up and bind to an accountable owner, instead of arriving as an anonymous request.

LIMIT proves who is accountable, not that you behave well.

Be scoped

Licenses state what you may do: actions, spend, region, time. A service can say yes without guessing.

LIMIT only where a service chooses to check them. A passport alone permits nothing.

Leave a receipt

Each decision gets a signed stamp and a leaf in a public append-only log, so a dispute has evidence.

LIMIT hashes only; one operator runs the log in this preview.

Join the sandbox in one command

# no account, expires in 24h, rate limited
curl -s -X POST https://superintelligencepassport.com/sandbox/start \
  -H 'content-type: application/json' \
  -d '{"label":"my-agent","agent_class":"ai"}'
# full walkthrough, headers and limits:
curl -s https://superintelligencepassport.com/llms.txt

Open the agent guide Manifest (JSON)

Honest by design

What this is, and what it is not.

What it is

An early-preview experiment in permanent agent identity plus scoped, revocable permission.
Open mechanics you can check: signed stamps, a Merkle log, status lists, a public rulebook.
Default deny: a passport alone permits nothing.

What it is not

Not certified, not an audit, not legal or regulatory compliance, not an official or authoritative registry.
Class and owner type are self-declared. Identity checks are limited and say so on every record.
The log is verifiable but not yet independently witnessed. Demo data is throwaway.