01
Identity
Every agent has an owner, purpose, scope, and expiry.
The identity layer for the agentic web
Every agent.One pass.
Businesses can join the free checkpoint early access. Agent passports are planned at $5/month so AI agents can prove who they are before they shop, book, submit, or act; paid checkout is not enabled yet.
Freecheckpoint for any website
Planned $5/moper agent passport
One callto verify before the action
Shopping agentsBooking agentsCoding agentsResearch agentsSupport agentsProcurement agentsOps agentsFinance agents
Gardien control plane
Websites get checkpoints. Agents get passports.
Gardien sits between AI agents and the websites or systems they want to touch. Businesses can join the free checkpoint early access; agent passports have a planned $5/month launch price and are not yet sold through checkout.
current request
shopping-agent wants checkout access
decision verified
One purchase. Scoped permission. Full audit.
02
Approval
Sensitive work pauses before it reaches money, data, or production.
03
Access
Credentials are short-lived and matched to the approved task.
04
Audit
Requests, decisions, revocations, and outcomes stay reviewable.
Decision artifact
The product is the decision before the action.
A business does not need another dashboard first. It needs one enforceable answer before an agent submits, spends, books, or writes data.
01
One protected action
Start with a single route, form, checkout step, booking, or API write.
02
Scoped passport
The agent proves owner, purpose, scope, expiry, and revocation state.
03
Enforceable decision
Your system receives allowed, denied, expired, revoked, or human review.
example verifier flow
POST /v1/verify
agent_idshopping-agent
actioncheckout.submit
scopepurchase:single
expires_in12m
requestcheckout.submit · shopping-agent$42
policypassport.active · scope: purchasefresh
decisionneeds_review · owner reviewedallowed
decision returned
needs_review → allowed
The site enforces the answer before the action runs. Trust can expire or be revoked later.
Example verifier flow
One checkpoint before the website trusts the agent.
A website asks whether an agent may perform a specific action, then receives a decision it can enforce.
Example · POST /v1/verify
{
"agent_id": "shopping-agent",
"action": "checkout.submit",
"amount": 42,
"expires_in": "12m"
}decisionneeds_approval → allowed
Example event log illustrative data
requestshopping-agent · POST /checkout/submitneeds approval
decisionAlen · Approve $42 cart checkoutapproved
credentialgardien · 12 minute checkout scopeissued
closegardien · credential expired + event sealedrevoked
Two-sided network
Free for websites. Paid by agent passports.
Businesses
FreeAdd the defensive checkpoint for free.
A business can protect its website, form, app route, or API action before unknown AI agents submit requests, spend money, or touch accounts.
Free checkpoint
Verifier route
Allow / deny decisions
Audit trail
Agent owners
Planned $5 / monthJoin early access for agent passports.
Hermes, OpenClaw, Odysseus, and similar agents need a passport before they can shop, book, submit requests, or act across websites on behalf of a person or team.
Gardien
Agent card
License number
AP-SHOP-7F3K-2210
Status
Active
No photo
Bound account
Revocable
Bound account
Revocable
Agent
shopping-agent
Verification type
Email
Runtime
hermes-runtime/2.4
Scope
checkout.submit
Limit
$50 / day
Expiration date
06/21/2029
Access secret code
ap_sec_7F3K••••••••••••••••
Security model
Less interface. More control.
Three moves, repeated for every sensitive action an agent attempts. No dashboards to babysit.
Verify the agent
Tie each agent to an owner, purpose, runtime, and allowed surfaces before it asks for access.
Narrow the action
Turn broad trust into a specific request: one tool, one intent, one expiry, one decision.
Close the loop
Expire credentials, rotate access, and keep the decision trail ready for review.
Trust layer
Trust is revocable by design.
Gardien should not ask businesses to trust anonymous agents forever. The free checkpoint checks the action, and the paid passport gives each agent a practical path to prove, pause, expire, or revoke access.
Passport
Owner, purpose, environment, runtime, scope, status, and expiry stay attached to the agent.
Policy
Protected systems can ask one question before acting: is this agent allowed to do this right now?
Revocation
Paused, expired, or revoked agents stop receiving trusted decisions before they reach the sensitive action.
Audit
Decisions stay reviewable without pretending a badge guarantees good behavior.
Operating flow
Verify the agent.
Before an AI agent touches a tool, Gardien confirms who owns it, what it is, and why it is asking for access.
01
Verify the agent
02
Narrow the action
03
Close the loop
Next step
Get a passport before the agent gets access.
Businesses can join free website-checkpoint early access. Agent passports are planned at $5/month for autonomous agents that need durable identity, approval gates, revocation, and audit trails; billing is not active yet.