Every AI agent needs to prove who it is. Not with an API key. Not with a session token. With a cryptographic certificate that carries its identity, its trust level, its jurisdiction, and its capabilities. Signed by a Certificate Authority. Verifiable by anyone. Revocable in real time.
AI agents are autonomous. They run for hours without human supervision. They call APIs, access databases, move money, and deploy code. An API key tells you which account is paying. It does not tell you which agent is acting, what it is allowed to do, or where it is permitted to operate.
When an agent makes a bad decision at 3am, an API key cannot answer the question every regulator asks: who did this, what were they authorised to do, and can you prove it?
AgentPass issues free X.509v3 certificates to AI agents. Each certificate is short-lived, auto-rotating, and instantly revocable. The certificate carries:
The certificate is issued by the AgentPass Certificate Authority, backed by GCP Cloud KMS HSM hardware (FIPS 140-2 Level 3). Private keys never leave the hardware security module.
AgentPass agent identity is specified in published IETF Internet-Drafts:
Built on RFC 5280, FIPS 186-5, SPIFFE v1.0, aligned with EU AI Act and eIDAS 2.0.
One API call. Free certificates for every AI agent. No WebTrust overhead. No per-cert fees. Your agent has identity in seconds.
See it in action