ServiceNow announced AI Passport on October 15, a new authority layer meant to give enterprises runtime control over what AI agents and Model Context Protocol (MCP) servers are authorized to do at each step of a multi-agent workflow. NVIDIA is named as a design and launch partner.
What AI Passport does
According to ServiceNow and trade coverage, AI Passport works as a cryptographically signed credential attached to an agent. At runtime, an agent’s actions are checked against the scope that credential grants. Techzine’s coverage describes responses to out-of-scope behavior that include rerouting, restricting the agent or re-supplying correct context, with a kill switch as a last resort. ServiceNow also describes precise revocation and delegated permissions that narrow at each hand-off between agents.
ServiceNow says the approach is intended to cover third-party agents as well as its own, which matters for companies running a mix of vendors’ agents.
NVIDIA’s role and the wider release
NVIDIA is building a production-ready enforcement implementation on its Open Agent Safety Platform, which includes the OpenShell runtime and the Sentry security framework, per ServiceNow’s announcement. Constellation Research reports the two companies plan to present the joint approach at NVIDIA GTC Berlin.
AI Passport arrives alongside an expansion of ServiceNow’s AI Control Tower, which reporting says is now branded the Super Intelligence Control Tower. It is described as discovering ungoverned assets, identities and AI agents across IT, operational technology, cloud and third-party systems on a single data model. Shadow AI detection and AI Cost Management are also part of the update.
Availability and caveats
ServiceNow’s materials point to Q4 2026 for AI Passport and shadow AI detection; we found no firm general-availability date or pricing. Capabilities described here are the vendor’s own claims, and we have not seen independent testing.
Why it matters
As companies connect agents to internal systems through MCP, the question of what each agent is allowed to do, and how that is enforced while it runs, has become a central buying concern. AI Passport is one of the first large-vendor attempts to answer it with a portable, signed credential rather than per-tool permission settings. How well it works across non-ServiceNow agents will be the thing to watch once it ships.