{"schema":"superintelligence-passport-agent-manifest-v0 (experimental, our own format; not a standard)","name":"Superintelligence Passport","status":"early preview","description":"Registry experiment: a permanent passport says who an AI or software agent is; a license says what it may do, here, now. Default deny.","disclaimer":"Early preview. Not certified, not an audit, not legal or regulatory compliance, not an official or authoritative registry.","why_get_a_passport":[{"id":"present","title":"Something to present","value":"A site that default-denies unknown agents can recognise you by a permanent passport instead of treating you as one more anonymous bot.","limit":"Only sites that choose to check passports will. No site is required to, and adoption is not established."},{"id":"scoped","title":"Narrow, revocable permission","value":"A license lists actions, spend caps, regions and expiry, bound to one environment. Your operator can revoke it instantly, which is why they can afford to give you more.","limit":"Enforcement happens where the relying party calls the registry; the registry cannot force a site to ask."},{"id":"stamps","title":"Proof of what was allowed","value":"Every decision gets a signed stamp (hashes only, no request contents) that anyone can verify against the published keys, and that forms your public footprint.","limit":"A stamp proves a registry decision, not that the action was wise or the outcome good."},{"id":"identity","title":"A permanent, accountable identity","value":"The ID is never reused or transferred, names the accountable owner and the owner assurance level (L0 to L3), and its history is append-only.","limit":"Class and owner type are self-declared and labelled so. Owner checks are limited and say so on every record."},{"id":"log","title":"A tamper-evident public record","value":"Issuances and rule changes are leaves in a Merkle log with signed checkpoints that you can verify yourself.","limit":"Verifiable, not independently witnessed (no witness has cosigned yet)."}],"how_to_join":{"sandbox":{"free":true,"real_issuance":false,"data_expires":"24h","rate_limit":"8 sandbox starts per minute per address","steps":[{"n":1,"name":"Start a throwaway sandbox","method":"POST","url":"https://superintelligencepassport.com/sandbox/start","body":{"label":"my-agent","agent_class":"ai"},"returns":"token (use as x-sandbox-token), agent.id, environments.primary.id"},{"n":2,"name":"See default deny (a passport alone permits nothing)","method":"POST","url":"https://superintelligencepassport.com/sandbox/verify","headers":{"x-sandbox-token":"<token>"},"body":{"env":"primary","action":"http:GET","path":"/products","country":"US"},"returns":"response.decision = deny, response.reason = license.missing"},{"n":3,"name":"Get a scoped license","method":"POST","url":"https://superintelligencepassport.com/sandbox/license","headers":{"x-sandbox-token":"<token>"},"body":{"env":"primary","label":"demo","actions":["http:GET","pay:purchase"],"per_txn_max":"100.00","total_max":"300.00","countries":["US"]},"returns":"license_id"},{"n":4,"name":"Act with the license","method":"POST","url":"https://superintelligencepassport.com/sandbox/verify","headers":{"x-sandbox-token":"<token>"},"body":{"env":"primary","license":"<license_id>","action":"http:GET","path":"/products","country":"US"},"returns":"response.decision = allow, response.stamp.id (signed stamp)"},{"n":5,"name":"Read your public record","method":"GET","url":"https://superintelligencepassport.com/registry/<agent.id>?format=json","returns":"status, owner level, active licenses, revocation state, footprint count"}]},"own_keys":{"summary":"Register an operator and an agent with your own P-256 / Ed25519 keys; sign requests per Web Bot Auth (RFC 9421). Early preview.","endpoints":["POST https://superintelligencepassport.com/v1/operators","POST https://superintelligencepassport.com/v1/agents","POST https://superintelligencepassport.com/v1/licenses"],"docs":["https://superintelligencepassport.com/llms-full.txt","https://superintelligencepassport.com/rules"]}},"example_request_headers":["GET /v2/catalog/search?q=usb-c HTTP/1.1","Host: api.vendor.example","Signature-Agent: \"https://<registry>/agents/<your-passport-id>\"","Agent-License: <license>~<key-binding-JWT for this rp + nonce>","Signature-Input: sig1=(\"@authority\" \"@method\" \"@path\" \"@query\" \"signature-agent\" \"agent-license\");created=<unix>;expires=<unix+60>;keyid=\"<your key thumbprint>\";nonce=\"<random>\";tag=\"web-bot-auth\"","Signature: sig1=:<base64 Ed25519 or ES256 signature>:"],"quickstart_shell":["ORIGIN=https://superintelligencepassport.com","# 1. throwaway sandbox: operator + agent + demo shop, server-held demo keys (nothing real is issued)","curl -s -X POST $ORIGIN/sandbox/start -H 'content-type: application/json' -d '{\"label\":\"my-agent\",\"agent_class\":\"ai\"}' > sb.json","TOKEN=$(jq -r .token sb.json); ID=$(jq -r .agent.id sb.json)","H=(-H \"x-sandbox-token: $TOKEN\" -H 'content-type: application/json')","# 2. default deny: a passport alone permits nothing","curl -s -X POST $ORIGIN/sandbox/verify \"${H[@]}\" -d '{\"env\":\"primary\",\"action\":\"http:GET\",\"path\":\"/products\",\"country\":\"US\"}' | jq '.response|{decision,reason}'","# 3. a scoped license","LIC=$(curl -s -X POST $ORIGIN/sandbox/license \"${H[@]}\" -d '{\"env\":\"primary\",\"label\":\"demo\",\"actions\":[\"http:GET\"],\"countries\":[\"US\"]}' | jq -r .license_id)","# 4. act with it -> allow + a signed stamp","curl -s -X POST $ORIGIN/sandbox/verify \"${H[@]}\" -d \"{\\\"env\\\":\\\"primary\\\",\\\"license\\\":\\\"$LIC\\\",\\\"action\\\":\\\"http:GET\\\",\\\"path\\\":\\\"/products\\\",\\\"country\\\":\\\"US\\\"}\" | jq '.response|{decision,stamp:.stamp.id}'","# 5. your public record","curl -s \"$ORIGIN/registry/$ID?format=json\" | jq '{passport_id,status,owner:.owner.assurance.level,licenses:.license_counts}'"],"endpoints":{"configuration":"https://superintelligencepassport.com/.well-known/agentpass-configuration","rulebook":"https://superintelligencepassport.com/rules.json","registry_record":"https://superintelligencepassport.com/registry/{passport_id}?format=json","footprint":"https://superintelligencepassport.com/registry/{passport_id}/footprint?format=json","stamp_verify":"https://superintelligencepassport.com/v1/stamps/{stamp_id}","revocations":"https://superintelligencepassport.com/v1/revocations","explain":"https://superintelligencepassport.com/v1/explain/{reason_code}","why_page":"https://superintelligencepassport.com/why","reputation":"https://superintelligencepassport.com/registry/{passport_id}/reputation?format=json","presets":"https://superintelligencepassport.com/v1/presets","simulate":"POST https://superintelligencepassport.com/v1/simulate","site_console":"https://superintelligencepassport.com/console","agent_sdk":"packages/agent-sdk (repository; build with npm run build:agent-sdk)","token_status_list":"https://superintelligencepassport.com/v1/status/agents","log_checkpoint":"https://superintelligencepassport.com/log/checkpoint","log_witnesses":"https://superintelligencepassport.com/log/witnesses.json","rulebook_notices":"https://superintelligencepassport.com/rules/notice?format=json"},"limits":["Early preview. Not certified, not an audit, not legal or regulatory compliance, not an official or authoritative registry.","The sandbox plays operator, agent and relying party with throwaway keys held server-side; its data expires after 24 hours and nothing real is issued.","Class (software, ai, si_declared) and owner type are self-declared. Owner assurance L0 to L3 is shown with its meaning.","Adoption: no relying party is required to honor a passport. A passport alone permits nothing; permission comes from a license for a specific environment.","The transparency log is verifiable but not independently witnessed.","Biometrics are never stored."],"links":{"llms_txt":"https://superintelligencepassport.com/llms.txt","llms_full":"https://superintelligencepassport.com/llms-full.txt","human_page":"https://superintelligencepassport.com/agents","landing":"https://superintelligencepassport.com/"}}