ECZ-ID Agent Trust

See what your AI agents can reach, what changed, and what evidence exists before you let them act.

Free local review. No account is required for the local check, and source code, prompts, tool arguments, tool results and secret values are not uploaded.

Start here

1. Product home: https://agents.ecocitizenz.com/
2. Developer quickstart / docs: https://developers.ecocitizenz.com/quickstarts/agent/
3. Resolver — public proof: https://resolver.ecocitizenz.org
4. TrustOps — free Passport / setup / operating services: https://trustops.ecocitizenz.com/start
5. Machine discovery: https://machine.ecocitizenz.org/.well-known/ecz-machine.json

Start with the specialist product home for the complete product journey. Use Developer Gateway for implementation, Resolver for public proof, TrustOps for free Passport/setup/operating services, and machine discovery for canonical machine-readable routing.

Useful for

• AI-agent and MCP tool builders
• platform and AppSec teams integrating agents
• enterprise architects reviewing agent authority and dependencies
• teams evaluating third-party agents before granting access

What you can do in under a minute

1. Open a trusted workspace.
2. Run ECZ-ID Agent Trust: Scan Workspace.
3. Review local Agent X-Ray findings, change observations and public-proof posture.
4. Resolve existing proof, request current proof, or create/connect a free Agent Passport when you operate the agent.

Community — free local review

Community includes:

• Agent X-Ray — local inventory of relevant agent surfaces, tool names, framework labels and environment-variable names;
• deterministic local change detection;
• Resolver lookup and current-proof routes;
• privacy-preserving local evidence reports;
• free Agent Passport acquisition.

The Agent Passport is the durable core identity. It is free and is not replaced or metered by a software subscription.

Agent Trust Pro — optional paid local developer software

Agent Trust Pro adds a deeper, evidence-only view of what your agents can reach, computed locally:

• Authority Graph with evidence on every relationship;
• Authority Epochs for retained local history and comparison;
• Dangerous action chains as deterministic review indicators;
• reciprocal Agent-to-MCP visibility;
• reviewable remediation with preview, backup and rollback.

Agent Trust Pro is a Developer Trust software entitlement. It does not create, mutate or certify canonical ECZ-ID truth, and it does not replace or meter the free Agent Passport.

Developer Trust Pro Bundle unlocks both Agent Trust Pro and MCP Trust Pro.

Separate organisational product: KYA Authority

KYA Authority is separate from Agent Trust Pro. It may be relevant when an organisation needs higher-level agent governance or authority operations, but it is not an alias for the Agent Trust Pro entitlement and is not required to keep Community or the free Agent Passport available.

Result semantics

Results describe evidence and public-proof posture, not an approval or compliance decision. Common states include evidence observed, evidence not observed, no public proof reference found yet, review recommended and re-check before reliance. Local policy decides whether the evidence you review is sufficient.

Missing public proof does not mean an agent is malicious or unsuitable; it means the requested public evidence was not established by the available observation.

Privacy & Workspace Trust

Free identity vs optional products

Payment for Developer Trust software never creates, replaces or meters the underlying Agent Passport identity.

Frequently asked questions

Does installing this extension create an ECZ-ID?
No. Local review works without an account. Creating or connecting a free Agent Passport is a separate, explicit user action.

Does Agent Trust Pro replace the Agent Passport?
No. The Passport remains the durable identity. Agent Trust Pro is optional local developer software.

Is KYA Authority the same product as Agent Trust Pro?
No. KYA Authority is a separate organisational product. Agent Trust Pro is the local Developer Trust software entitlement used by this extension.

What does Developer Trust Pro Bundle do?
It unlocks both Agent Trust Pro and MCP Trust Pro under the established Developer Trust entitlement model.

Does a missing proof reference mean something is unsafe?
No. It means resolver-verifiable public proof was not established by the available evidence. Local policy decides whether the evidence you review is sufficient.

Does Agent Trust run my agents or tools?
No. It reviews local evidence; it does not execute an agent, tool or webhook.

When can MCP coverage show ENFORCED?
Only the MCP product can show ENFORCED while a live Local Trust Gate is genuinely mediating that MCP traffic. Agent Trust does not silently mediate runtime execution.

Python / CLI

python -m pip install ecz-id-agents
ecz-id-agents --help

The matching Python tooling is also local-first and does not replace Resolver proof.

Machine-readable facts

This table is a stable human-readable index into ECZ-ID's real machine interfaces; it is not a substitute for the canonical machine-discovery document.

Canonical machine discovery is authoritative for machine routing and supported interfaces. Local extension observations, Resolver public proof and paid operating services remain separate layers.

Product resources

1. Product home: https://agents.ecocitizenz.com/
2. Developer quickstart / docs: https://developers.ecocitizenz.com/quickstarts/agent/
3. Resolver — public proof: https://resolver.ecocitizenz.org
4. TrustOps — free Passport / setup / operating services: https://trustops.ecocitizenz.com/start
5. Machine discovery: https://machine.ecocitizenz.org/.well-known/ecz-machine.json
6. Support: https://www.ecocitizenz.com/pages/contact

Local extension observations, public proof and operating setup are separate layers. Use the specialist home for the product journey, the Developer Gateway for implementation, Resolver for public proof and the canonical machine-discovery endpoint for machine-readable routing.