ServiceNow's AI Passport gives agents signed, revocable identities
Built on open specs any provider can issue, with Nvidia as launch partner — landing as a week of rogue-agent breaches makes agent permissions urgent.
Copy markdown
A signed credential, checked at runtime
AI Passport is a cryptographically signed credential scoped to what an org authorized — CMDB entries, GRC policy, workflow approvals. An agent that stays in scope runs; drift gets it redirected, restricted, or killed “at machine speed,” with an audit trail at every step. Expected Q4 2026.
Open spec, so the identity is portable
ServiceNow says any governance tool, identity provider, or enforcement point can issue and verify passports — including for third-party agents and MCP servers, with delegation that narrows at each hop. The usable idea: scoped, verifiable identity for the agents and MCP servers you ship. The caveat, per analysts: an open spec only matters once others actually adopt it.
Nvidia is building the enforcement half
Nvidia is the launch partner, building the enforcement implementation on its Open Agent Safety Platform — deterministic, runtime controls on what an agent is allowed to do. ServiceNow says the two will detail how the pieces fit together at NVIDIA GTC Berlin.
Everyone's converging on signed agent identity
Same stretch, Google's Gemini Enterprise agent harness added cryptographic agent identity and a design where the agent's credentials never touch the sandbox it runs in. The signal for anything you put in production: scoped, signed, revocable identity is becoming the baseline for deploying agents, not an extra.