---
title: "Passport API"
description: "Issue, read, export and verify the signed Agent Passport."
label: "Passport"
generated: "the API catalogue in apps/control-plane/src/routes/developer.ts"
---


A passport is a signed snapshot of who an agent is and what it may do. It is useful for presenting identity to a third party, and it is never the authorization decision: the gateway re-resolves live authority on every request.

## Endpoints

| | Endpoint | Permission | Notes |
| --- | --- | --- | --- |
| `GET` | `/v1/passports/{agentId}` | `passport:read` | — |
| `POST` | `/v1/passports/{agentId}/issue` | `passport:issue` | — |
| `POST` | `/v1/passports/{agentId}/verify` | `passport:verify` | — |
| `GET` | `/v1/passports/{agentId}/export` | `passport:read` | — |
| `POST` | `/v1/passports/verify-external` | `passport:verify` | — |

## What each endpoint does

### `GET /v1/passports/{agentId}`

Active Agent Passport with signature.

Requires `passport:read`.

### `POST /v1/passports/{agentId}/issue`

Issue a new passport version.

Requires `passport:issue`.

### `POST /v1/passports/{agentId}/verify`

Verify a locally-issued passport against live state.

Requires `passport:verify`.

### `GET /v1/passports/{agentId}/export`

Export the passport with the platform verification key.

Requires `passport:read`.

### `POST /v1/passports/verify-external`

Verify an externally-presented passport.

Requires `passport:verify`.