passport
Sign in Start free
passport
Who it's for Developers Teams Product How it worksApp catalogPassport CLIConnect an agent Company Enterprise Pricing Docs Changelog Security Trust center
Sign inStart free
Theme

Give agents access. Keep your keys.

Passport connects Claude, ChatGPT, Cursor, and Codex to your company's apps. Agents never hold your credentials, risky actions wait for a person, and every action is on the record.

Works with the agents you already use

ClaudeClaude CodeCursorChatGPTVS CodeCodexPassport CLI

Who it's for

For developersLet coding agents use production without holding your keys.npx passport-bridge@latest scan For teamsOne set of rules and one record for every agent your company uses.Pro and Enterprise

Connect once.
Use it in every agent.

Connect GitHub one time, and the same tools and rules appear in Claude, Cursor, ChatGPT, and the terminal. No config files. No pasted tokens. On Pro, your whole team gets the same apps.

Browse apps

Risky actions
wait for a person.

Reads flow. Routine writes are logged. Deletes, rollbacks, and secret changes ask first, in every agent and in the terminal.

Approvals appear inside the agent or on the web. Each answer applies to that exact call.

Every action, on the record.

See who acted, through which agent, with which tool, and what happened. Passport records the action, never the prompt or the data.

Stream it to your SIEM

Your agents never hold your keys.

App credentials stay encrypted inside Passport. Agents sign in to Passport instead, and every call is checked again when it runs.

Encrypted at rest

Tokens and keys are encrypted and never sent to agents or written into config files.

Checked when it runs

Every call is authorized again against current rules, not what the agent saw earlier.

Tool changes, announced

When an app redefines a tool, Passport tells you. Suspicious changes are held until reviewed.

Security details Trust center Self-hosting

MCP, APIs, and the command line.

Connect MCP servers from the catalog, turn an OpenAPI spec into a governed app, and give terminal agents the same rules through Passport CLI.

MCP servers

165 apps in the catalog, or your own server.

Browse apps
OpenAPI

Import a spec. Review every tool it becomes.

GET/invoicesRead
POST/refundsWrite
DELETE/customers/{id}Destructive
Checked on every callMCP servers, OpenAPI apps, and Passport CLI.
Recordedgh, git, kubectl, and other CLIs your agents run, through passport hook. With its guard on, recognized destructive commands ask first.

Start free.
Add your team as you grow.

Free
$0

For one person. Unlimited apps and agents, approvals, and activity.

  • Every supported agent and Passport CLI
  • The whole catalog, self-service
  • No card required
Start free
Pro
$15per member / month

For teams. Everyone gets the same apps and rules in every agent.

  • Everything in Free
  • Unlimited people
  • Teams, team rules, and Activity
  • Your own MCP servers
Start free
Enterprise
$30per member / month

For a company-wide rollout.

  • SSO and SCIM
  • Rollout review and guardrails
  • SIEM streaming and alerts
Talk to us

Prices in USD. Agents are never billed as members. Compare plans

Start with one app.

Free for one person, with unlimited apps. No card required.

Start freeTalk to us
Prefer the terminal? Start with the developer setup