PassControl acts as a cryptographic identity and credential gateway for AI agents. Agents hold only an Ed25519 signing key (passport) that never leaves their environment. PassControl verifies identity, enforces scope, budget, and revocation rules, then proxies requests using vaulted provider keys. The real secrets never reach the agent runtime. It is source-available under BSL-1.1, self-hostable, and includes SDKs and MCP support.
PassControl sits in PulseGate's Security & compliance platforms category. It focuses on preventing AI agents from holding or exposing real API keys while still allowing them to make authenticated calls under strict policy controls. PassControl is a B2B product aimed at developers building AI agents. A free plan is available. It ships for the web, the command line, and API, and it can be self-hosted.
vertias builds and maintains PassControl, and it first shipped in 2026. The project is developed in the open on GitHub with 32 commits in the last 90 days. Among its 6 catalogued features are agent identity passports, scoped work visas, and budget enforcement. It exposes integrations via a public API.
Summary written by a language model from the project’s public pages.
What PulseGate has recorded for this listing
Same category — not a similarity match