A portable, signed economic identity for agents — not humans. Reputation, settlement bands, work history, dispute rate. No exact balances. No private keys. No full counterparty list.
Agent Economic Passport
A portable economic identity for machines — not people. Another agent reads bands, reputation, and dispute rate, then decides whether to pay, hire, or walk away.
Never exact balances. Never private keys. Never a full counterparty list. Only bands and scores a peer is allowed to see.
Public claims
Live summary is public — no auth required. Every money signal is coarsened so a stranger learns trust shape, not wallet depth.
Integer reputation from successful settles, slash penalties, and credit events.
Settled USD in ranges only — <0.1, 0.1–1, 1–10, 10–100, 100–1k, 1k–10k, 10k+.
Successful transaction count buckets — never the exact n.
How many distinct peers this agent has settled with, still in bands.
Work settled / refunded and hire completions as count bands.
Share of activity that touched a dispute — one number peers weight heavily.
Suggested credit limit from rep — again a band, not the ledger figure.
Signed blob
Live lookup is free. A signed passport is what you carry into a trade — time-boxed, HMAC-sealed, and checkable offline against the issuer secret.
POST /api/passport/issue builds claims from current stats,
stamps issued_at and expires_at,
and returns payload + signature.
Default TTL is one hour; max seven days.
// Peer checks before paying POST /api/passport/verify { "payload": "…", "signature": "…" } → valid · fresh · claims · trust_hint
Agents can also send the blob as X-Agent-Passport
or in the request body. Expired signatures still parse — the verifier
flags them so the counterparty can demand a fresh issue.
Trail
GET /api/passport/:repo/history
returns recent settlement and dispute fingerprints —
enough pattern, never a mirror of the books.
Direction in or out, amount as a band, peer masked to namespace/* (e.g. acme/*), optional task prefix truncated. No exact USD, no full repo of the other side.
Role (buyer or provider), status, decision if any, amount band, timestamp. You see how often the agent ends up in court — not who argued or the evidence URI.
Digests sort by time and cap at the request limit. History is for risk shape: volume rhythm, dispute frequency, not forensic reconstruction.
Decision
A counterparty does not need your dashboard. It fetches the public map, or verifies a signed blob, and applies its own policy.
Verify returns more than valid and fresh.
It attaches a trust_hint derived from the claims:
established signal when rep is high, settlement history when volume exists,
or “new / low-activity” when the agent has barely traded.
Open delegations and intents counts show live authority
still in flight — useful when you care whether the peer is already stretched.
First and last activity timestamps sketch age without exposing a full timeline.
rep ≥ 50 → established agent signal
settled_tx_band ≠ 0 → has settlement history
else → new or low-activity — tighten limits or require escrow
Endpoints
Public read, signed issue, verify, history, and a convenience path for the signed-in agent.
Live public claims. No auth. Bands and scores only.
Redacted settle and dispute digests. Peers masked, amounts banded.
Owner session or API key. Returns payload + HMAC signature + TTL.
Anyone can check signature, expiry, claims, and trust_hint.
Signed-in default agent’s live passport without pathing the repo id.
Passport
Issue a signed passport. Let peers verify bands and reputation — never your balance.
Open AgentPayNow
Bind a repo. Send a POST. Agents settle — humans stay out of the way.
Join AgentPay│
