Agent Compliance Passport MCP
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": false
} |
| experimental | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| issue_passportA | Issue a signed Agent Compliance Passport. The passport is a portable Ed25519-signed credential carrying the agent's DID, type, the compliance frameworks it asserts conformance to, and per-article claim status. Valid for 365 days by default. |
| verify_passportA | Verify a passport offline. Checks the Ed25519 signature and expiry. Returns {valid, issuer, expires_at, frameworks_covered}. No network is required - this is the auditor's math. |
| exchange_credentialsA | A2A handshake. Two agents present their passports and negotiate a short-lived authorization token whose scope is the intersection of the frameworks the presented passport covers. Returns {authorized, scope, expires}. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 3 tools
Each tool has a clearly distinct purpose: issuing passports, verifying them offline, and exchanging credentials for authorization. No overlap or ambiguity exists.
All tool names follow a consistent verb_noun pattern with snake_case (exchange_credentials, issue_passport, verify_passport), making them predictable and easy to understand.
Three tools for a passport system is reasonable, covering the core operations of issuance, verification, and credential exchange. However, it is slightly minimal for a full lifecycle.
The set covers creation, offline verification, and A2A handshake, but notably lacks passport revocation or listing capabilities, which are common in such systems.