Every AI agent will need a passport

We live in an era where AI agents can negotiate prices, schedule services, and make commitments on behalf of businesses. What they cannot do is prove who they are or answer for what they do. This is the missing layer of the agent economy. Every system at scale eventually solved this problem. Phones require certified SIM cards. Websites need SSL certificates. Businesses must verify their identity before accepting payments. Agents will be no different. They will need passports. Not for tourism, but for trust. Information that proves identity, establishes reputation, and attaches consequences to behavior.

Let’s think about something simple. An AI agent that seamlessly manages your appointments, your scheduling, and maybe even some price negotiations on your behalf. The hair salon down the street has it too. Your agent calls theirs to book a haircut. They go back and forth on time, prices, and maybe a discount for off hours.

Now, the salon agent is prepared to increase the income. It drives prices up, creates a false sense of limited availability, and pushes premium add-ons you didn’t ask for. Well, this is not unusual behavior. Human salespeople do this all the time. The difference is that AI agents will act at scale, across thousands of simultaneous conversations, learn what works and adapt to it. The most aggressive agent earns more money. So every business with an agent has an incentive to push it hard. Nothing in today’s infrastructure tops how far that push goes.

And this is going fast. In the past year, OpenAI, Google, Microsoft, NVIDIA, and a series of open source projects have all deployed frameworks to build and spread agents. Gartner says 40% of enterprise applications will embed agents by the end of 2026. The agent AI market is expected to reach $52 billion by 2030. Agents are talking to each other now, and the volume is only increasing.

So let’s go back to the salon. Now imagine that your agent can check, before the conversation begins, that that salon agent has a verified identity tied to the real business, whether other agents have been tagged with aggressive strategies, and whether he has sent an economic obligation that he may lose if he is caught cheating. Consider that your agent may simply refuse to engage if any of those checks fail.

That’s a passport

Here’s how it will work: Every restaurant you visit on Google must create a business profile and verify that they own that restaurant. If that identity is confirmed, the review is cumulative. We already know how useful Google Maps is and the legitimacy it provides to existing businesses. Other people’s experiences with that restaurant are visible to you before you enter. If the food is bad or the service is rude, it shows. A restaurant cannot simply delete the listing and create a new one to avoid updates, because the verification is linked to the true identity of their business.

AI agents need this as well. Every sales agent must be bound by a certified business with something like KYC for individuals or KYB for businesses. A local hair salon agent will be registered under a real salon business license. If that agent is consistently rated as deceptive or untrustworthy by the agents they work with, those ratings stick. They are after the business, not the software. A salon can update its agent, retrain it, or change the model underneath. But identity persists, and so does the reputation that goes with it. This is how you prevent the most obvious failure mode: the agent is caught, dumped, and replaced with a similar one with a clean slate five minutes later.

For day-to-day interactions, an authenticated identity with a reputation layer is probably sufficient. Booking a haircut, arranging a bathroom, ordering clothes. The stakes are low enough that the reputational consequences create enough pressure to behave.

But it’s not all about getting a haircut!

When agents negotiate contracts, handle procurement, or manage financial transactions, the potential profit from cheating can be large enough that a bad review doesn’t matter. A business may accept a damaged reputation if one fraudulent conversation is worth more than the cost of future lost bookings. In these high value situations, you need a second method: economic skin in the game.

This is where proof-of-stake blockchains have something to teach us. In Ethereum (ETH), validators who want to participate in securing the network must deposit their money first. If they behave honestly, they get rewards. If they try to exploit the system, part of their money disappears automatically. This has been operating at scale, with billions of dollars locked up, for years. The reason it works is simple: when you have something vulnerable, you behave differently than when you don’t. We call this “Economic Skin in the Game”.

The same principle applies to agents. Before entering into high-value negotiations, the agent posts a bond. If the interaction ends successfully, the bond is returned. If the agent is found to have used fraudulent tactics, part or all of the bond is reduced. The size of the bond is set by whoever is on the receiving end. A freelance agent may ask for a small deposit. An enterprise purchasing system may require something larger. This machine does not need someone to watch the whole conversation. If cheating costs money every time you get caught, and the other party can see your history of getting caught, the incentive to cheat drops quickly.

Enforcement can work with smart contracts. Both agents lock in funds before negotiations begin, and the contract is released or withdrawn based on what happens. Because the interaction is already digital, the contract does not require speculation about real-world outcomes. Chat logs, commitments, and cancellations are all recorded by both parties. Clear violations such as no-shows, potentially false pricing, or revocable commitments may be automatically enforced.

These two methods live within one passport, and work together. Identity verification is fundamental. It says: this agent belongs to a real and accountable business. Reputation builds on that identity over time as agents collaborate, rate each other, and accumulate a record. Staking adds a financial layer to partnerships where reputation alone is not a strong enough deterrent. Together, they create a rich passport with every interaction. How many bonds does this agent hold? How much money did he risk? How many disputes have we been involved in, and how were they resolved? An agent checking a passport before an interview begins has something real to check, not a self-written description of what another agent says they can do.

The good news is that people are starting to think about the social media framework. Google’s A2A protocol gives agents a way to find each other and exchange messages. Anthropic’s MCP measures how agents connect to external tools and data. NIST launched the AI ​​Agent Standards Initiative in February 2026 and is actively soliciting input on agent identity and security. These are necessary steps. But they settle on how agents talk, not whether agents should be trusted. The regulations tell you what the agent can do. The passport tells you what to do, whose, and what to lose.

The industry has agent security frameworks as an alignment problem: how do you make sure your agent does what you want it to? That is an internal question. The external question is difficult. How do you make sure their agent can’t exploit yours? That’s not an alignment problem. It’s a question of accountability. And right now, companies building the agent layer are rushing to increase power and autonomy, without building ownership and results systems that make autonomy secure at scale.

All agents will need a passport. Because when agents start negotiating, committing, and collaborating on behalf of real economic actors, ownership is no longer selective; it becomes a real infrastructure. The only uncertainty is timing: whether we build that infrastructure on purpose, or whether the first big failure forces us to build it under pressure, after trust has been lost.