One set of rules. Every agent.

Your company uses Claude, ChatGPT, Cursor, and VS Code. Passport gives everyone the same apps with the same rules, and gives you one record of what every agent did.

People keep the agents they already use

Connect once.
Everyone gets it.

Pick from 165 apps in the catalog, add your own MCP server, or import an OpenAPI spec. Each app is connected once, and everyone gets the same tools in every agent. No config files. No pasted tokens.

Browse apps

Team setupsChoose which agents each team uses and which apps each agent starts with, plus shared workflow instructions.
BundlesGive an agent a short list of tools from several apps, with its own connection URL.

Rules and approvals.

Every tool is classed as read, write, or destructive, so a rule means the same thing in every agent. Reads flow, routine writes are logged, and destructive actions ask first. On Pro, set rules by team and person.

Approvals appear inside the agent or on the web. Each answer applies to that exact call.

Approvals in the agent

The person who asked answers inside their agent or on the web: approve once, for an hour, or deny.

A floor for each team

On Pro, set the least strict choice a team may hold. People can be stricter, never looser.

Tool changes, held

When an app redefines a tool, Passport tells you. Suspicious changes are held until an admin reviews them.

People and teams.

Invite your company, group people into teams, and see how the rollout is going. Pro includes the People page and teams. Enterprise ties access to your identity provider.

Teams with their own accessEach team gets its apps, approval rules, and setup. Open a team to see exactly what it gets.
Adoption at a glanceSee who joined, who connected an agent, and who used a tool.
Access tied to identity EnterpriseOIDC SSO and SCIM with group mapping. Offboarding ends sessions, agents, and app grants at once.
Invite your teamInvite people by email. Pro has unlimited people, and agents are never billed as members.

Every agent, inside
and outside Passport.

On Enterprise, Inventory lists every agent connected through Passport and who uses it. The passport discover command finds MCP connections people set up directly on their laptops, so you can approve them or move them behind Passport.

Through PassportEvery agent and its connections, one per person per computer, with idle and out-of-date ones marked. Revoke any of them.
Outside PassportDirect connections found by scans. Approve each one, allow it for now, or ask its owner to move it behind Passport or remove it.

One record of
every action.

Activity shows who acted, through which agent, with which tool, and the result. Admin changes have their own record. Passport records the action, never the prompt or the data.

Your own Activity

Everyone sees their own calls, on every plan.

The whole workspace

On Pro, admins filter every call by person, team, app, and agent, and export CSV or JSONL.

Into your SIEM

On Enterprise, stream Activity over OTLP and send alerts to a webhook.

Pro for teams.
Enterprise for the company.

Pro
$15per member / month

For teams. Everyone gets the same apps and rules in every agent.

  • Unlimited people and automations
  • People, teams, Team setups, and bundles
  • Rules and approval floors by team and person
  • Workspace Activity with CSV and JSONL export
Start free
Enterprise
$30per member / month

Company-wide identity, controls, and streaming.

  • Everything in Pro
  • OIDC SSO and SCIM
  • Inventory and catalog rollout review
  • Custom guardrails and Runtime Security
  • SIEM and OTLP streaming, alert webhooks
Talk to us

Prices in USD. Free is for one person. Agents are never billed as members. Compare plans

Bring your team.

Start free, connect your first app, then invite your team on Pro.