Workflow bundle

ECZ-ID Agentic Stack Assurance Bundle

Assure the connected agent stack rather than one component in isolation.

A cross-product bundle for agent systems where the agent and the MCP servers it calls must be reviewed together.

Prices and what can be bought today come from TrustOps, which owns every purchase, entitlement and renewal.

For agent operators

Why it matters when the subject is an AI agent.

A reviewer rarely assesses an agent alone. They assess what it reaches, starting with the MCP servers it calls. Each of those is its own subject, with its own operator and its own Passport. The bundle packages the agent's and its MCP servers' evidence as one review story without merging their identities.

The questions it helps answer

What does this agent call, and who operates each thing it calls?
Is the evidence for the agent and its MCP servers consistent?
Can we review the stack once instead of piece by piece?

Fit

Who it is for, and what changes.

Best for

Agent platforms.
Enterprise agent deployments.
AI automation providers.

Outcomes

One review story across the stack.
Less duplicated evidence.
Clearer boundaries between components and their operators.

Inside

What is included, and how it works.

What is included

The relevant specialist assurance products for the agent and MCP layers.
A cross-entity evidence structure that follows the agent's call path.
Buyer-facing workflow artefacts for the stack as a whole.

How it works

Identify the stack.
Map its ECZ-ID subjects — the agent and its MCP servers — and their operators.
Complete the relevant evidence products.
Package the cross-stack view.

Boundaries

What the FREE Passport already gives you, and what this never does.

Already included free

The agent and each MCP server it calls are separate subjects with separate operators, each with a FREE Passport family of its own.

£0 · No card required · Permanent, not a trial.

What it never does

Bundling evidence does not merge the identities of the underlying entities.
A call path documented here is a dependency, not a permission: authority to act is still granted inside your own systems.
Identifying an agent is not controlling it. ECZ-ID does not authorise, restrict, supervise, pause or stop what an agent does — its operator and the party relying on it stay responsible for that.

Assurance
ECZ-ID Agent Authority & Enterprise Assurance Kit
A practical evidence product for teams that need to explain who operates an agent, what authority it has been delegated, where that delegation comes from and what a reviewer can independently re-check — without rebuilding the answer for every customer review.
Boundary: The Kit organises evidence; it does not certify the agent as safe or compliant.
See details Open in TrustOps(opens in a new tab — trustops.ecocitizenz.com)
Platform
ECZ-ID AI Platform Assurance Bundle
A broader bundle for AI platforms that combine agents, the MCP servers they call and the APIs they act through.
Boundary: A platform pack does not collapse distinct entities into one identity.
See details Open in TrustOps(opens in a new tab — trustops.ecocitizenz.com)
Relationships
ECZ-ID Graph Intelligence
Graph Intelligence helps an organisation understand how ECZ-ID entities, operators, bindings and dependencies connect, while keeping public-safe graph facts separate from private operating context.
Boundary: A Graph relationship is a published relationship, not an endorsement and not a permission.
See details Open in TrustOps(opens in a new tab — trustops.ecocitizenz.com)

Every Agent product

Start with the identity. Add Agentic Stack Assurance Bundle when it earns its place.