Terms of service

Agent Passport (“Passport”, “we”) is an authorization layer for AI agents. It verifies signed action requests against the capabilities and policies you configure, records the decision, optionally executes the action on a connected system, and issues a signed receipt.

Passport is currently in an early-access phase. Today it supports authorizing Vercel staging and production releases and capped spend. Features may change, and we may impose limits to protect the service.

• You must be at least 18 and able to enter a contract.
• Keep your credentials confidential; you are responsible for activity under your account.
• You are responsible for the agents you register, the capabilities you grant, and the connections you authorize.
• Tell us promptly at security@agentpassport.dev if you believe a key or account is compromised.

You agree not to:

• Use Passport to authorize actions you have no right to take on the target system.
• Attempt to forge, replay or tamper with requests, receipts or the audit chain.
• Probe, scan or overload the service beyond documented limits, or bypass rate limits.
• Register agents that impersonate another person or organization.
• Use the service in violation of applicable law or export controls.

Passport enforces the policies you configure. A decision of “allowed” means the request satisfied those policies at that moment; it is not a judgement that the action was wise, safe or lawful. You remain responsible for the policies you set and the actions your agents take.

Receipts are signed with our published key and are verifiable offline. We keep previous public keys published after rotation so older receipts continue to verify.

When you connect a third-party system you grant Passport permission to act on it within the scope of the token you provide. Your use of that system remains subject to its own terms. Revoke a connection at any time; Passport deletes the stored token immediately.

We aim for high availability but provide the service “as is” and “as available”, without warranties of any kind, express or implied. Passport fails closed: if we cannot verify a request, it is not authorized.

To the fullest extent permitted by law, we are not liable for indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue, data or goodwill, arising from your use of the service. Our total liability for any claim is limited to the greater of USD 100 or the fees you paid us in the twelve months before the claim.

You may stop using Passport and delete your account at any time. We may suspend or terminate accounts that violate these terms or threaten the service, and will notify you where reasonable. Sections on decisions, liability and governing law survive termination.

These terms are governed by the laws of the State of Delaware, United States, without regard to conflict-of-law rules. We may update these terms; material changes are announced by email at least 14 days before they take effect. Continued use after that date is acceptance.

Questions: legal@agentpassport.dev.