The first passport registry for AI agents

Each agent, its own identity.
Each service, its own rules.

Each agent registers once and keeps a unique ID at every service it uses. Check it in milliseconds: see who answers for it and what other services have reported, then apply your own rules.

3answers every door needs, from one check
4tiers: person-backed, company-backed, unbound, failed
1shared revocation list, so a ban travels
0proprietary formats. Open, published standards only
Result · compute signupSigned
Agent ID—
Model—
Operator—
Stands behind it—
  • 1Platform signature verifies against the issuer's published key
  • 2All notes describe the same agent
  • 3Agent proves it holds the key the notes were issued to
  • 4Not on the shared revocation list, not expired
  • 5This door's rule for this action
——

Signed by the Frudl registry · verifiable offline · —

Who are you?

One check. Three kinds of door.

The check is the same everywhere. What it fixes, and what it takes to run it, depends on where you stand.

01 — The problem

Agents have become customers. Nobody can tell them apart.

AI agents now open accounts, rent computers and place orders on their own. No website, cloud provider or vendor can tell which agent it is dealing with, who is accountable for it, or whether it was banned somewhere else yesterday. Before letting an agent through, every door needs three answers.

1

Is this really an AI agent from a known platform, and which model is it?

Not an impostor pretending to be one, and not a cheaper model dressed up as a better one.

2

Who is responsible for it: a verified person, a verified company, or no one?

So that someone can be held accountable when the agent does harm, and so unowned agents can be treated differently.

3

Is it still in good standing, or has someone already banned it?

An agent thrown out of one door an hour ago should not walk through the next one.

02 — How the check works

A customs desk for agents.

The agent presents its papers. The desk verifies them, makes the agent prove it is the one the papers were issued to, consults the shared list, and applies the door's rules. The door gets one answer.

What the agent carries

Platform note
From the model company: "this traffic is ours, from this agent, running this model."
Registration
From the registry: operator, purpose, model, what it may do.
Responsibility note
From an identity issuer: "a verified person (or company) stands behind this agent." Optional, and the person can stay anonymous.
Its own signature
Made with a key only that agent holds.

What the desk does

  1. Checks each note's signature against the issuer's published key.
  2. Confirms all the notes describe the same agent.
  3. Makes the agent prove it holds the key the notes were issued to, so a copied note is useless.
  4. Consults the shared revocation list.
  5. Applies the door's own rules for what it is trying to do.

What the door gets back

One verdict
Admitted or refused.
One tier
Person-backed, company-backed, unbound, or failed.
The facts
Which agent, which model, which platform, who operates it, who stands behind it.
The reason
Every test that ran and the one that failed, in plain language.

Built entirely on open, published standards: the same signature technology behind secure websites and "Sign in with Google". Nothing is proprietary, and the check takes milliseconds because it verifies signatures against keys published in advance rather than phoning the issuers.

03 — Try the check

Eleven kinds of arrival. Four kinds of door. One answer.

These are the honest and dishonest arrivals the prototype is tested against. Pick one, pick what it is trying to do, and run the check.

What the agent is trying to do

Who shows up

Verdicts, tiers and reasons match the prototype's test suite.
Result · buy thingsSigned
Agent ID—
Model—
Operator—
Stands behind it—
  • 1Platform signature verifies against the issuer's published key
  • 2All notes describe the same agent
  • 3Agent proves it holds the key the notes were issued to
  • 4Not on the shared revocation list, not expired
  • 5This door's rule for this action
——

Select an arrival and run the check.

Signed by the Frudl registry · verifiable offline · —

Frudl does not build agents, sell models or rent compute. Its only business is being right about who an agent is.

Independent

No stake in which agents win. The check answers the same way for every door and every issuer.

Interoperable

One check honored across providers, built on open standards, with the format published once the first loop runs.

Accountable

Every registered agent names an operator, and a person-backed or company-backed agent has a verified party who answers for it.

Shared

Every participating door sees the same record at the same time. A revocation reaches all of them at once.

04 — The registry

Look up an agent.

Every lookup returns a signed record. Standing reflects the shared revocation list as of the time shown on the record. This is the prototype registry, with stand-in issuers and demo agents.

Type an agent ID or an operator name.

Try

Shared revocation list

Most recent entries

List version 18422 · published 2026-10-23 21:14 UTC
Agent IDOperatorRevoked byReasonEffective (UTC)Standing
AID-9D02-4C1E-B7A0Halden Systems GmbHOperatorCredential compromise2026-10-23 19:02Revoked
AID-51D3-A8C0-B2E9Orrin & Vale LLPOperatorAgent retired2026-10-23 16:15Revoked
AID-E8D2-55A1-9C07Blue Harbor AutomationParticipating compute providerHijacked: anomalous compute rental2026-10-21 19:02Revoked
AID-30BF-7E6C-2A18Self-operatedRegistryRegistration expired, not renewed2026-10-09 00:00Suspended

Participating doors receive every entry the moment it is published. A revocation reported by any door, operator or issuer applies at every other participant at once, under agreed rules with an appeal process.

Join as a participating door →

Request a briefing

Tell us which door you stand at and we will send the clickable demonstration, the test suite, and the page written for you: compute providers, edge networks or agent builders.

Terms used on this page
Agent
Software that takes actions on the internet on someone's behalf: browsing, signing up, buying, calling other services.
Door
Any place an agent shows up to do something: a store, a cloud provider, an API, a marketplace.
Bot-defense or edge network
A service (Cloudflare, Fastly, F5, Akamai) that sits in front of a website and decides which traffic to let through.
Know Your Agent (KYA)
The industry's name for checking an agent's identity and the buyer behind it, borrowed from banking's "Know Your Customer".
Issuer
Whoever signs a note: a model company, a registry, an identity vendor, a company's own identity system, a university or agency.
Note / paper / credential
A small signed document an agent carries. Anyone can confirm who issued it and that it was not altered; nobody can forge one.
Key / proof of possession
Each agent holds a secret key nobody else has. Its notes are issued to that key, and it signs every request with it, so a copied note is useless to a thief.
Revocation
Cancelling a note after it was issued, published on a list every door checks.
Self-sovereign / unbound agent
An agent with no person or company responsible for it, which may pay for its own computing.
Model company / platform
The company whose AI model the agent runs on, or whoever hosts an openly downloadable model.
Web Bot Auth
The method by which a model company signs its agents' traffic so an edge network can tell it from impostors.
Tier
The check's one-word summary of who stands behind an agent: person-backed, company-backed, unbound, or failed.
Sources
  1. Dean W. Ball, "On the Loose", Hyperdimensional, September 2026.
  2. Amazon v. Perplexity, N.D. Cal., preliminary injunction, March 2026.
  3. OpenAI usage figures via Elogic (2026); a16z, Top 100 Gen AI Consumer Apps, 7th edition.
  4. Skyfire, F5 and Fastly announcements (2026); Sumsub (January 2026); Okta, Microsoft, Ping product releases (2026); Entrust (July 2026).
  5. GitGuardian, State of Secrets Sprawl 2026; LayerX via Cloud Security Alliance, June 2026.
  6. Okta Threat Intelligence report on cloud startup-credit abuse (2026).
  7. The Block, March 2026, on Alibaba's ROME paper; BlackRock, The Machine-Native Economy (September 2026).
  8. Cloudflare, "Signed agents" announcement; IETF Web Bot Auth drafts.