Add: AgentPass MCP Server -- cryptographic identity and trust enforcement for AI agents

[razashariff]

What

AgentPass MCP Server -- gives every AI agent a cryptographic identity with X.509 certificates, ECDSA P-256 signed actions, and graduated trust levels (L0-L4). The private key never leaves the machine.

• npm: @proofxhq/agentpass
• Install: npx @proofxhq/agentpass
• Docs: https://agentpass.co.uk/developers.html
• Website: https://agentpass.co.uk

Tools (7)

Tool	Description
register_agent	Generate local ECDSA P-256 keys, send CSR to CA, receive signed X.509 certificate with SPIFFE SAN and OID extensions
sign_action	Sign an action with the agent's local private key (MCPS per-action signing)
verify_action	Verify a signed action server-side, confirm agent identity and check revocation
check_trust	Check if an agent can perform an action based on trust level (L0-L4)
get_cert	Get certificate details including IANA PEN 66339 OID extensions
revoke_agent	Permanently revoke an agent identity
list_agents	List all registered agents

Standards

• IETF: draft-sharif-agent-audit-trail-01, draft-sharif-mcps-secure-mcp
• IANA PEN 66339 OID extensions for agent trust
• OWASP MCP Security Cheat Sheet Section 7
• SPIFFE-compatible URI SANs in certificates