Daily Build · Jun 20, 2026

Agent Capability Passport

A trust layer for agent-ready web experiences. Discover, evaluate, and safely connect AI agents to external tools with scoped credentials and verifiable connection flows.

Mock dataNo backend requiredAgent-ready UI

across 6 protocols

128

Discoverable capabilities

signed + checksum match

Verified origins

scoped + auto-expiring

1,204

Temporary credentials issued

boundary violations

High-risk scopes blocked

Registry

Capability registry

Every tool an agent can reach, with its verification status, scopes, and risk score.

Capability Passport

Deployment Preview Scanner

VerifiedMCP

Scans a preview deployment for exposed secrets, broken routes, and risky environment variables.

Origin

tools.northwind-ci.com

Provider

Northwind CI

Auth model

OAuth device flow + scoped token

Version

v1.9.0

Allowed scopes

read-onlydeploymentbuild-logs

Denied scopes

billinguser-data

Trust evidence

Origin signature valid
Manifest checksum match
Scopes within declared boundary
Audited read-only deployment access

Risk explanation

Moderate risk. Reads deployment metadata and logs but performs no writes. Moderate risk due to access to build logs that may contain sensitive output.

Sample invocation

deploy.scan({
  url: "preview-x9.vercel.app",
  depth: "full"
})

Last verified · Jun 19, 10:02 PM

Topology

Connection graph

How agents route to capabilities and downstream systems across the trust boundary.

AgentsCapabilitiesSystems

Support Copilot

Release Engineer Agent

Research Scout Agent

Production API

Data Warehouse

Billing Ledger

Knowledge Base

VerifiedReviewBlocked

Connection simulator

dry run · no side effects

Agent

Capability

Requested scope

Execution logidle

// run a dry check to stream execution logs

Connected agents

Support Copilot
Customer assistance
Release Engineer Agent
Ship & verify
Research Scout Agent
Discovery & analysis

Target systems

Production API
Data Warehouse
Billing Ledger
Knowledge Base

Discovery inbox

3 new

Status Page Reader
Uptime Grid
WebMCP
Read-only public status data with a verified origin signature.
safe
Email Draft Composer
Postmark Labs
MCP
Requests write scope to a messaging channel; needs human review.
review
Payout Disburser
Unknown origin
REST
Unsigned origin requesting payment-method and admin scopes.
blocked