AI Passport uses cryptographically signed credentials to verify an AI agent’s authorized scope at runtime.
ServiceNow has announced AI Passport, a solution that gives enterprises runtime control over the actions AI agents and Model Context Protocol (MCP) servers are authorized to perform across multi-agent workflows.
The company has also expanded its AI governance capabilities, enabling organizations to discover AI deployments, control agent activity and track spending against outcomes.
According to ServiceNow, AI Passport uses cryptographically signed credentials to verify an AI agent’s authorized scope at runtime, including in environments such as NVIDIA OpenShell. If an agent operates outside its approved scope, the system can redirect or restrict its actions, restore the necessary context or terminate it using a kill switch. ServiceNow’s Super Intelligence Control Tower also maintains audit records of agent activity.
“As AI agents proliferate across the enterprise, visibility alone isn’t enough. Enterprises need confidence that every AI agent is operating within its authorized scope,” said Jon Sigler, Executive Vice President and General Manager, AI Platform at ServiceNow. “ServiceNow closes that gap with an operational harness across AI Passport and new capabilities that unify agent authority, governance, and operational oversight so enterprises can scale agentic AI with control.”
AI Passport Highlights
AI Passport is built on open specifications so that any governance product, identity provider, or enforcement point can issue and verify credentials for their own and third-party AI agents. Credentials are verifiable at every step in multi-agent workflows, said ServiceNow.
Each AI agent receives its own AI Passport, issued by the Super Intelligence Control Tower and grounded in the enterprise’s live business context through ServiceNow Configuration Management Database (CMDB), Governance, Risk, and Compliance (GRC) policies, and workflow approvals. For third-party AI agents especially, this creates a verifiable permissions record rather than relying on the AI agent’s own ‘claims’ about its permissions.
The approach to AI Passport enables precision revocation and scoped delegation that narrows at each step for third-party agent governance, along with audit trails that include full compliance signatures. ServiceNow is also announcing NVIDIA as a design and launch partner, building a production-ready enforcement implementation using the NVIDIA Open Agent Safety Platform, which features NVIDIA OpenShell open-source secure runtime software and the NVIDIA Sentry security framework.
“As enterprises shift from experimenting with agents to running them in production, securing those agents demands enforcement at the infrastructure layer,” said Itay Ozery, Director of Product Marketing for Networking and Cybersecurity at NVIDIA. “By implementing AI Passport with the NVIDIA Open Agent Safety Platform, ServiceNow customers can continuously verify and enforce what every agent is authorized to do — at machine speed and at runtime.”
Unified AI Governance
In addition to AI Passport, ServiceNow has also expanded end-to-end AI governance on one unified platform across discovery, visibility, control, measurement, and compliance.
ServiceNow claims to have added new AI governance capabilities:
- Shadow AI detection that finds unapproved AI agents running in the network
- 400+ out-of-box connectors that will enable AI discovery across platforms and vendors
- Access mapping that grounds authorization decisions in actual entitlements
- Continuous enterprise AI observability that keeps trackof AI agent traces and behavior
Beyond discovering what AI is running, enterprises need visibility into whether that AI is delivering value and operating within budget. ServiceNow is announcing:
- Cost governance that tracks user, department, and runtime spending
- Value intelligence that connects consumption, cost, quality, and realized user value so teams can optimize AI use, maintain budget commitments, and help prove business value
- AI Cost Management as part of IT Asset Management (ITAM), which will integrate with the Super Intelligence Control Tower tobring frontier model, embedded SaaS AI, hyperscaler, and data center GPU costs into a single view, alert teams to potential budget overruns, and ground spend in business context
- Policy enforcement that will manage alert-to-throttle-to-block graduated responses
Availability
AI Passport, shadow AI detection, and AI Cost Management are expected to be available in Q4 2026. ServiceNow’s Operational Resilience solution for financial services is available today.
Disclaimer: This article is based on the official product launch announcement by ServiceNow and has been edited for length and readability. Product capability claims and expansions are based on information provided by the company.
