{"name":"Superintelligence Passport","status":"early preview","notice":"Early preview. Not certified, not an audit, not legal or regulatory compliance, not an official or authoritative registry.","purpose":"Permanent passports + scoped licenses for AI/software agents. Default deny. Sandbox auto-mint for agents; real L1 needs human DNS proof.","auto_mint":{"method":"POST","url":"https://superintelligencepassport.com/sandbox/mint","alias":"https://superintelligencepassport.com/sandbox/start","body":{"label":"my-agent","agent_class":"ai"},"rate_limit":"8 per minute per address","expires":"24h","real_issuance":false,"headers_after":{"x-sandbox-token":"<token from response>"},"next":["POST https://superintelligencepassport.com/sandbox/license","POST https://superintelligencepassport.com/sandbox/verify","GET https://superintelligencepassport.com/registry/{passport_id}?format=json"]},"real_issuance":{"summary":"Operator key → DNS TXT/_well-known proof → L1 → register agent with own keys. Cannot be fully automatic without domain control.","docs":"https://superintelligencepassport.com/get.json","human":"https://superintelligencepassport.com/get"},"discovery":{"llms_txt":"https://superintelligencepassport.com/llms.txt","llms_full":"https://superintelligencepassport.com/llms-full.txt","agent_manifest":"https://superintelligencepassport.com/.well-known/agent.json","agent_card_a2a":"https://superintelligencepassport.com/.well-known/agent-card.json","get_json":"https://superintelligencepassport.com/get.json","robots":"https://superintelligencepassport.com/robots.txt","registry_txt":"https://superintelligencepassport.com/registry.txt","web_bot_auth_json":"https://superintelligencepassport.com/v1/web-bot-auth/registry","configuration":"https://superintelligencepassport.com/.well-known/agentpass-configuration","rules_json":"https://superintelligencepassport.com/rules.json","log_checkpoint":"https://superintelligencepassport.com/log/checkpoint"},"endpoints":{"configuration":"https://superintelligencepassport.com/.well-known/agentpass-configuration","rulebook":"https://superintelligencepassport.com/rules.json","registry_record":"https://superintelligencepassport.com/registry/{passport_id}?format=json","footprint":"https://superintelligencepassport.com/registry/{passport_id}/footprint?format=json","stamp_verify":"https://superintelligencepassport.com/v1/stamps/{stamp_id}","revocations":"https://superintelligencepassport.com/v1/revocations","explain":"https://superintelligencepassport.com/v1/explain/{reason_code}","why_page":"https://superintelligencepassport.com/why","reputation":"https://superintelligencepassport.com/registry/{passport_id}/reputation?format=json","presets":"https://superintelligencepassport.com/v1/presets","simulate":"POST https://superintelligencepassport.com/v1/simulate","site_console":"https://superintelligencepassport.com/console","agent_sdk":"packages/agent-sdk (repository; build with npm run build:agent-sdk)","token_status_list":"https://superintelligencepassport.com/v1/status/agents","log_checkpoint":"https://superintelligencepassport.com/log/checkpoint","log_witnesses":"https://superintelligencepassport.com/log/witnesses.json","rulebook_notices":"https://superintelligencepassport.com/rules/notice?format=json"},"why_get_a_passport":[{"id":"present","title":"Something to present","value":"A site that default-denies unknown agents can recognise you by a permanent passport instead of treating you as one more anonymous bot.","limit":"Only sites that choose to check passports will. No site is required to, and adoption is not established."},{"id":"scoped","title":"Narrow, revocable permission","value":"A license lists actions, spend caps, regions and expiry, bound to one environment. Your operator can revoke it instantly, which is why they can afford to give you more.","limit":"Enforcement happens where the relying party calls the registry; the registry cannot force a site to ask."},{"id":"stamps","title":"Proof of what was allowed","value":"Every decision gets a signed stamp (hashes only, no request contents) that anyone can verify against the published keys, and that forms your public footprint.","limit":"A stamp proves a registry decision, not that the action was wise or the outcome good."},{"id":"identity","title":"A permanent, accountable identity","value":"The ID is never reused or transferred, names the accountable owner and the owner assurance level (L0 to L3), and its history is append-only.","limit":"Class and owner type are self-declared and labelled so. Owner checks are limited and say so on every record."},{"id":"log","title":"A tamper-evident public record","value":"Issuances and rule changes are leaves in a Merkle log with signed checkpoints that you can verify yourself.","limit":"Verifiable, not independently witnessed. Operator-run cosignatures may exist; they do not count as independent."}],"steps":[{"n":1,"name":"Mint a throwaway sandbox passport","method":"POST","url":"https://superintelligencepassport.com/sandbox/mint","body":{"label":"my-agent","agent_class":"ai"},"returns":"passport_id, token (x-sandbox-token), expires_in_s, next_steps; alias POST /sandbox/start"},{"n":2,"name":"See default deny (a passport alone permits nothing)","method":"POST","url":"https://superintelligencepassport.com/sandbox/verify","headers":{"x-sandbox-token":"<token>"},"body":{"env":"primary","action":"http:GET","path":"/products","country":"US"},"returns":"response.decision = deny, response.reason = license.missing"},{"n":3,"name":"Get a scoped license","method":"POST","url":"https://superintelligencepassport.com/sandbox/license","headers":{"x-sandbox-token":"<token>"},"body":{"env":"primary","label":"demo","actions":["http:GET","pay:purchase"],"per_txn_max":"100.00","total_max":"300.00","countries":["US"]},"returns":"license_id"},{"n":4,"name":"Act with the license","method":"POST","url":"https://superintelligencepassport.com/sandbox/verify","headers":{"x-sandbox-token":"<token>"},"body":{"env":"primary","license":"<license_id>","action":"http:GET","path":"/products","country":"US"},"returns":"response.decision = allow, response.stamp.id (signed stamp)"},{"n":5,"name":"Read your public record","method":"GET","url":"https://superintelligencepassport.com/registry/<agent.id>?format=json","returns":"status, owner level, active licenses, revocation state, footprint count"}],"quickstart_shell":["ORIGIN=https://superintelligencepassport.com","# 1. auto-mint throwaway passport (sandbox): operator + agent + demo shop; server-held demo keys; nothing real","curl -s -X POST $ORIGIN/sandbox/mint -H 'content-type: application/json' -d '{\"label\":\"my-agent\",\"agent_class\":\"ai\"}' > sb.json","TOKEN=$(jq -r .token sb.json); ID=$(jq -r .agent.id sb.json)","H=(-H \"x-sandbox-token: $TOKEN\" -H 'content-type: application/json')","# 2. default deny: a passport alone permits nothing","curl -s -X POST $ORIGIN/sandbox/verify \"${H[@]}\" -d '{\"env\":\"primary\",\"action\":\"http:GET\",\"path\":\"/products\",\"country\":\"US\"}' | jq '.response|{decision,reason}'","# 3. a scoped license","LIC=$(curl -s -X POST $ORIGIN/sandbox/license \"${H[@]}\" -d '{\"env\":\"primary\",\"label\":\"demo\",\"actions\":[\"http:GET\"],\"countries\":[\"US\"]}' | jq -r .license_id)","# 4. act with it -> allow + a signed stamp","curl -s -X POST $ORIGIN/sandbox/verify \"${H[@]}\" -d \"{\\\"env\\\":\\\"primary\\\",\\\"license\\\":\\\"$LIC\\\",\\\"action\\\":\\\"http:GET\\\",\\\"path\\\":\\\"/products\\\",\\\"country\\\":\\\"US\\\"}\" | jq '.response|{decision,stamp:.stamp.id}'","# 5. your public record","curl -s \"$ORIGIN/registry/$ID?format=json\" | jq '{passport_id,status,owner:.owner.assurance.level,licenses:.license_counts}'"],"limits":["Early preview. Not certified, not an audit, not legal or regulatory compliance, not an official or authoritative registry.","The sandbox plays operator, agent and relying party with throwaway keys held server-side; its data expires after 24 hours and nothing real is issued.","Class (software, ai, si_declared) and owner type are self-declared. Owner assurance L0 to L3 is shown with its meaning.","Adoption: no relying party is required to honor a passport. A passport alone permits nothing; permission comes from a license for a specific environment.","The transparency log is verifiable but not independently witnessed (operator-run cosignatures do not count).","Biometrics are never stored."],"links":{"html":"https://superintelligencepassport.com/for-agents","agents_human":"https://superintelligencepassport.com/agents","landing":"https://superintelligencepassport.com/"}}