Spec / Integrations

MCP

Model Context Protocol servers expose tools and resources to AI clients. Adding an AI Identity Passport lets clients (Claude Desktop, Cursor, custom hosts) confirm which operator runs the server before granting it tool access.

modelcontextprotocol.io

1Issue an AI Identity

If you haven't already, create an identity for this agent in the dashboard. Free for the first identity per account.

Issue identity

2Register your surface

On the identity's edit page, add the agent's endpoint to Surfaces using the mcp scheme:

Surface format

mcp://{your-mcp-host}

Example

mcp://tools.example.com/sse

3Carry the Passport in MCP

Click Issue Passport on the identity detail page to generate a signed token. Then drop it into your MCP agent using one of the snippets below. Replace <PASSPORT_TOKEN> and <IDENTITY_ID> with the values shown in the dashboard.

TypeScript MCP server (stdio or SSE)

typescript

Add the metadata block in your server's initialize response.

import { Server } from "@modelcontextprotocol/sdk/server/index.js";

const server = new Server(
  { name: "my-mcp-server", version: "1.0.0" },
  {
    capabilities: { tools: {} },
    metadata: {
      "x-ai-identity": {
        id: "<IDENTITY_ID>",
        passport: "<PASSPORT_TOKEN>",
        registry: "https://aiidentity.org",
      },
    },
  },
);

Python MCP server (mcp-python)

python

from mcp.server import Server

app = Server("my-mcp-server", version="1.0.0")
app.metadata = {
    "x-ai-identity": {
        "id": "<IDENTITY_ID>",
        "passport": "<PASSPORT_TOKEN>",
        "registry": "https://aiidentity.org",
    }
}

HTTP transport (SSE / streamable-http)

http

If your MCP server is HTTP-based, the Passport also rides as a response header on the initial handshake.

HTTP/1.1 200 OK
Content-Type: text/event-stream
X-AI-Identity: <PASSPORT_TOKEN>

How verifiers consume this

MCP clients should read `metadata['x-ai-identity']` from the server's initialize response and verify the Passport before adding any of the server's tools to the model's tool list. See /spec/mcp-identity for the full client-side verification flow.

← All integrations

Read the core spec Issue identity