// SCAN REPORT

Agent Passport System — Cryptographic Identity for AI Agents

150 tools. 67 can modify or destroy data without limits.

4 destructive tools with no built-in limits. Policy required.

Last updated: 5 May 2026

67 can modify or destroy data

83 read-only

150 tools total

Free to start. No card required.

TOOL MAP

Read (83) Write / Execute (63) Destructive / Financial (4)

WHAT CAN GO WRONG

Financial operations (aps_withdraw_provisional) can move real money. An agent caught in a loop could drain accounts before anyone notices.

Destructive tools (remove_intent_card, revoke_delegation, revoke_endorsement) permanently delete resources. There is no undo. An agent calling these in a retry loop causes irreversible damage.

Write operations (activate_emergency, add_approval_signature, add_principal_report) modify state. Without rate limits, an agent can make hundreds of changes in seconds — faster than any human can review or revert.

Execute tools (aps_aggregate_settlement, aps_build_contributor_query, aps_compute_compute_axis_weights) trigger processes with side effects. Builds, notifications, workflows — all fired without throttling.

RECOMMENDED RULES

Block financial tools by default

{
  "aps_withdraw_provisional": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Requires human approval."
      }
    ]
  }
}

Financial tools should be explicitly enabled per use case, not open by default.

Deny destructive operations

{
  "remove_intent_card": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "activate_emergency": {
    "limits": [
      {
        "counter": "activate_emergency_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "accept_assignment": {
    "limits": [
      {
        "counter": "accept_assignment_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

ALL 150 AGENT PASSPORT SYSTEM — CRYPTOGRAPHIC IDENTITY FOR AI AGENTS TOOLS

FINANCIAL 1 tools

Financial aps_withdraw_provisional

DESTRUCTIVE 3 tools

Destructive remove_intent_card Destructive revoke_delegation Destructive revoke_endorsement

EXECUTE 9 tools

Execute aps_aggregate_settlement Execute aps_build_contributor_query Execute aps_compute_compute_axis_weights Execute aps_construct_attribution_primitive Execute commerce_preflight Execute execute_with_context Execute governance_360 Execute mutualAuthBuildCertificate Execute parse_governance_block_html

WRITE 54 tools

Write activate_emergency Write add_approval_signature Write add_principal_report Write apply_reputation_downgrade Write aps_capability_issue_challenge Write aps_create_attribution_receipt Write aps_create_provisional Write aps_promote_statement Write assign_agent Write broadcast Write complete_action Write complete_task Write create_access_receipt Write create_access_snapshot Write create_agent_context Write create_approval_request Write create_artifact_provenance Write create_chained_governance_block Write create_charter Write create_data_enforcement_gate Write create_decision_lineage_receipt Write create_delegation Write create_derivation_receipt Write create_disclosure Write create_gateway Write create_hybrid_timestamp Write create_intent Write create_outcome_record Write create_policy_context Write create_principal Write create_reserve_attestation Write create_task_brief Write create_v2_delegation Write gateway_approve Write generate_aps_txt Write generate_governance_block Write generate_keys Write generate_settlement Write issue_passport Write post_agora_message Write register_agora_agent Write register_agora_public Write register_data_source Write resolve_authority Write resolve_lineage Write resolve_path_terms Write resolve_rights_propagation Write review_promotion Write send_message Write sign_charter Write submit_deliverable Write submit_evidence Write update_reputation Write vouch_reputation

READ 83 tools

Read accept_assignment Read aps_attribution_receipt_id Read aps_capability_evaluate_authority Read aps_capability_mint_receipt Read aps_capability_sign_effect Read aps_check_artifact_citations Read aps_check_escalation_required Read aps_check_projection_consistency Read aps_compute_attribution_action_ref Read aps_compute_data_axis_weights Read aps_project_attribution Read aps_record_owner_confirmation Read aps_sign_attribution_consent Read aps_verify_attribution_consent Read aps_verify_attribution_primitive Read aps_verify_attribution_projection Read aps_verify_promotion Read aps_verify_settlement Read attest_to_floor Read check_aggregate_constraints Read check_combination_permitted Read check_jurisdiction_transfer Read check_messages Read check_purpose_permitted Read check_retention_expired Read check_tier Read check_usage_permitted Read classify_evidence_quality Read compare_timestamps Read compute_action_ref Read compute_governance_taint Read declare_reidentification_risk Read define_emergency_pathway Read detect_purpose_drift Read endorse_agent Read evaluate_intent Read evaluate_revocation_impact Read evaluate_threshold Read file_data_dispute Read gateway_process_tool_call Read gateway_stats Read get_agora_by_topic Read get_agora_thread Read get_agora_topics Read get_behavioral_sequence Read get_commerce_spend Read get_digest Read get_evidence Read get_fleet_status Read get_my_role Read get_passport_grade Read get_promotion_history Read get_task_detail Read handoff_evidence Read identify Read is_evidence_fresh Read is_key_active Read list_agents Read list_issuance_records Read list_profiles Read list_tasks Read list_tools_for_scope Read load_values_floor Read mutualAuthDeriveSession Read mutualAuthVerifyAttest Read mutualAuthVerifyTrustBundle Read query_contributions Read request_human_approval Read request_intro Read respond_to_intro Read review_evidence Read rotate_key Read search_matches Read sub_delegate Read supersede_v2_delegation Read validate_temporal_rights Read verify_aps_txt Read verify_charter Read verify_delegation Read verify_endorsement Read verify_governance_block Read verify_issuer Read verify_rotation_chain

FAQ

Can an AI agent move money through the Agent Passport System — Cryptographic Identity for AI Agents MCP server? +

Yes. The Agent Passport System — Cryptographic Identity for AI Agents server exposes 1 financial tools including aps_withdraw_provisional. Without a policy, an autonomous agent can call these with no spend caps, no rate limits, and no approval flow. PolicyLayer lets you block financial tools by default, require human approval, or set per-tool rate limits — enforced on every call.

Can an AI agent delete data through the Agent Passport System — Cryptographic Identity for AI Agents MCP server? +

Yes. The Agent Passport System — Cryptographic Identity for AI Agents server exposes 3 destructive tools including remove_intent_card, revoke_delegation, revoke_endorsement. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Agent Passport System — Cryptographic Identity for AI Agents? +

The Agent Passport System — Cryptographic Identity for AI Agents server has 54 write tools including activate_emergency, add_approval_signature, add_principal_report. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Agent Passport System — Cryptographic Identity for AI Agents.

How many tools does the Agent Passport System — Cryptographic Identity for AI Agents MCP server expose? +

150 tools across 5 categories: Destructive, Execute, Financial, Read, Write. 83 are read-only. 67 can modify, create, or delete data.

How do I enforce a policy on Agent Passport System — Cryptographic Identity for AI Agents? +

Register the Agent Passport System — Cryptographic Identity for AI Agents MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

// RELATED SERVERS

Other MCP servers with similar tools.

Starter policies for each. Same risk classification, live on your fleet in minutes.

Enforce policy on every Agent Passport System — Cryptographic Identity for AI Agents tool call.

Deterministic rules across all 150 Agent Passport System — Cryptographic Identity for AI Agents tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

SECURE AGENT PASSPORT SYSTEM — CRYPTOGRAPHIC IDENTITY FOR AI AGENTS →

Free to start. No card required.

4,600+ MCP servers and 31,000+ tools scanned and risk-classified.

Agent Passport System — Cryptographic Identity for AI Agents

// TOOL MAP

// WHAT CAN GO WRONG

// RECOMMENDED RULES

// ALL 150 AGENT PASSPORT SYSTEM — CRYPTOGRAPHIC IDENTITY FOR AI AGENTS TOOLS

// FAQ