Skip to content
ECZ-ID Agents
Free Passport

Flagship digital product · Agent

ECZ-ID Agent Authority & Enterprise Assurance Kit

Turn agent authority, operator and delegation evidence into a buyer-ready assurance record.

A practical evidence product for teams that need to explain who operates an agent, what authority it has been delegated, where that delegation comes from and what a reviewer can independently re-check — without rebuilding the answer for every customer review.

Open in TrustOps(opens in a new tab — trustops.ecocitizenz.com)Talk to us

Prices and what can be bought today come from TrustOps, which owns every purchase, entitlement and renewal.

For agent operators

Why it matters when the subject is an AI agent.

Enterprise buyers, security reviewers and procurement teams ask the same things of every agent: who runs it, what can it reach, who delegated that reach, and what happens when that changes. The FREE Agent Passport answers the first question in public. The Kit organises the rest into one reviewable record, built on that identity rather than beside it.

The questions it helps answer

  • Which agent is this, and is it the same one we reviewed last quarter?
  • Which organisation operates it, and who is accountable when something goes wrong?
  • What authority has the operator delegated to it — which tools, MCP servers and APIs can it reach, and under which identity?
  • Where does that delegation live, and how is a change to it recorded?
  • What can we re-check ourselves, without asking the vendor?

Fit

Who it is for, and what changes.

Best for

  • Agent vendors answering enterprise security and procurement reviews.
  • Enterprise AI teams putting internal agents in front of risk, audit or a customer.
  • Security and procurement reviewers who need one consistent record to assess.

Outcomes

  • A clear authority and delegation story for each agent, tied to its persistent ECZ-ID.
  • Reusable buyer evidence instead of a fresh questionnaire answer for every review.
  • Named operator accountability a reviewer can resolve independently.
  • A documented account of how delegated authority changes over time.

Inside

What is included, and how it works.

What is included

  • An authority and operator evidence structure built around the agent's ECZ-ID.
  • Delegation mapping prompts: what the operator has granted, and through which OAuth, IAM, MCP and API configuration it was granted.
  • Boundary prompts: what the agent has not been delegated, and what ECZ-ID does not do.
  • Buyer-facing review artefacts that point back to the live Resolver record.
  • Remediation guidance for the gaps a reviewer is most likely to raise.

How it works

  1. Start from the agent's FREE Agent Passport and its operator record.
  2. Map the authority the operator has delegated, and where each delegation lives in your own systems.
  3. Assemble the supporting evidence and resolve the gaps a reviewer would raise.
  4. Export the buyer-ready record. The reviewer re-checks the live Resolver record before relying on it.

Know Your Agent

The reviewer's question the identity layer deliberately leaves open.

Know-Your-Agent review asks four things of an agent: can we identify it, can we find who operates it, can we tell whether it is still the same agent, and can we see what it reaches. The FREE Passport answers the first three in public. The Kit is for the fourth.

  1. A Passport publishes a declaration

    It records who the agent is and who operates it. It is identity, not assessment. DECLARED does not mean independently verified. It records what an organisation says about itself, with the date it said it — not the outcome of a check.

  2. Verifying the operator does not verify the machine

    A VERIFIED or ASSURED Parent does not verify the agent. The parent organisation's identity is verified. The machine is not. An agent linked to a VERIFIED Parent is described exactly that way — linked to a VERIFIED Parent — never as a verified agent.

  3. So a reviewer still asks about authority

    What has this one agent been delegated, by whom, through which systems — and how would we know if that changed? That is the question the Kit organises the evidence for, and the only one it takes on.

Where authority lives

Authority is the operator's. The Kit documents it; nothing here grants it.

Authority is delegated by the operator, inside the operator's own systems — OAuth, IAM, MCP and API configuration. ECZ-ID can publish what the operator declares about that delegation; it never grants, enforces or revokes it.

The floor is the FREE Passport

Identity is free. A Passport is never metered, and issuing one consults no entitlement. The Kit is never the entry point to having an ECZ-ID, and there is no route in which it is required first. Most agents will never need one; not having one says nothing about an agent.

Outside the execution path

ECZ-ID stays outside the execution path. It does not broker your agent's calls, hold its credentials, or sit between it and the systems it uses. Documenting what an agent has been delegated changes nothing about what it can do — that stays in your OAuth, IAM, MCP and API configuration.

Mapping what your agents can reach starts on your own machine: Agent Trust inspects your workspace locally and reports to you, publishing nothing.

Boundaries

What the FREE Passport already gives you, and what this never does.

Already included free

The agent's persistent ECZ-ID, its operator relationship and its public Resolver record are free. The Kit builds on them and never replaces them.

£0 · No card required · Permanent, not a trial.

What it never does

  • The Kit organises evidence; it does not certify the agent as safe or compliant.
  • Authority is delegated by the operator inside its own systems. The Kit documents that delegation; ECZ-ID never grants, enforces or revokes it.
  • Documenting an agent's authority is not approving it. The reviewer's own policy decides what the record is worth.
  • Identifying an agent is not controlling it. ECZ-ID does not authorise, restrict, supervise, pause or stop what an agent does — its operator and the party relying on it stay responsible for that.

Related

Read next.

Every Agent product

Start with the identity. Add Agent Authority & Enterprise Assurance Kit when it earns its place.

£0 · No card required · Permanent, not a trial.

Get a FREE Agent PassportOpen in TrustOps(opens in a new tab — trustops.ecocitizenz.com)Talk to us