ServiceNow Wants Every AI Agent to Carry a Signed Passport

ServiceNow has announced AI Passport, a signed credential that agents and MCP servers must present at runtime, with NVIDIA as the design and launch partner.

• The passport scope comes from the ServiceNow configuration database, risk policy, and workflow approvals, not from the agent’s own claims.
• Scoped delegation narrows permissions at each hop, so a third-party agent cannot inherit a wider scope than its task.
• NVIDIA OpenShell enforces the policy outside the agent process, and Sentry on BlueField-4 DPUs watches activity out of band.
• Enforcement escalates from redirect and restrict up to a kill switch at machine speed.
• AI Passport and the related governance tools arrive in the fourth quarter, so this is a plan rather than a shipping product.

Governance is moving from a policy that agents are asked to follow toward a credential they must prove. Read the full analysis.