Kite Passport is a payment authorization framework for AI agents. You grant your agent a scoped spending session; the agent pays on your behalf through the Kite network; you approve every session with your passkey before a single dollar moves.

Installing Passport is one command. Creating your account takes two more. Registering your agent identity takes one.

# Install — works on macOS, Linux, and WSL
curl -fsSL https://agentpassport.ai/install.sh | bash

# Verify
kpass --version

$ kpass signup init --email you@example.com --output json
# → A verification link was sent to you@example.com.

$ kpass signup poll --signup-id <SIGNUP_ID> --wait --output json
# → status: verified

$ kpass signup exchange \
    --signup-id <SIGNUP_ID> \
    --code <8-CHAR-CODE> \
    --output json
# → Signed up and logged in as you@example.com.

{
  "signup_id":      "signup_019dc4dc-5711-72b4-a8b0-9d624b3bd40c",
  "expires_at":     "2026-04-25T13:52:47Z",
  "next_command":   "kpass signup poll --signup-id signup_019dc4dc-... --wait --output json",
  "status":         "human_action_required"
}

$ kpass agent:register --type coding-assistant --output json
# → Agent registered. Credentials saved to .kite-passport/agent.json

$ kpass login init --email you@example.com --output json
# → A one-time code was sent to you@example.com

$ kpass login verify --login-id <LOGIN_ID> --code <8-CHAR-CODE> --output json
# → Logged in as you@example.com

Your Passport has a custodial wallet on the Kite chain. To pay for anything you first need to put funds into it. Pick whichever on-ramp you prefer.

$ kpass wallet balance --output json
{
  "wallet_address": "0xabc123…",
  "chain_id": 2366,
  "assets": [
    { "symbol": "KITE", "balance": "0", "native": true },
    { "symbol": "USDC", "balance": "0" }
  ]
}

A session is a signed delegation from you to your agent: "you may spend up to $X per transaction, $Y total, using these assets, for the next Z hours." Nothing is deducted when the session is created — only when the agent spends.

$ kpass agent:session create \
    --task-summary 'General spending session' \
    --max-amount-per-tx 2 \
    --max-total-amount 10 \
    --ttl 2h \
    --assets USDC \
    --output json

# What session create returns:
{
  "request_id":   "agent_session_req_019dc4dc-5895-77e2-b52a-89cd46391478",
  "approval_url": "https://app.gokite.ai/approve/agent_session_req_019dc4dc",
  "expires_at":   "2026-04-26T22:00:00Z",
  "next_command": "kpass agent:session status --request-id agent_session_req_019dc4dc... --wait --output json",
  "status":       "human_action_required"
}

$ kpass agent:session status --request-id <REQUEST_ID> --wait --output json
# → session approved, current_session_id saved.

Delegation parameters at a glance

Scoped cards are budget-limited virtual cards issued for an approved agent session. Use this rail when a merchant expects a normal card checkout instead of an x402 payment or wallet transfer.

$ kpass agent:session create \
    --task-summary 'Buy one item from a card-only merchant' \
    --max-amount-per-tx 35 \
    --max-total-amount 35 \
    --ttl 30m \
    --assets USDC \
    --use-card \
    --output json

With an active session, three common scenarios unlock. All of them automatically respect your delegation limits — Passport will block any payment that violates the policy and return a clear error.

# Discover currently allowlisted services
$ ksearch services list

$ kpass agent:session execute \
    --url https://weather.hugen.tokyo/weather/current?city=Tokyo \
    --method GET \
    --output json

$ kpass wallet send \
    --to 0xRecipient --amount 10.5 --asset USDC \
    --output json

$ npx skills add gokite-ai/passport-skills/shopping
# Then, in your AI agent:
#   "Find me a 60% mechanical keyboard under $120 and check out."

Kite Passport needs an AI agent that can execute shell commands. The two most common options:

Claude Code

Install Claude Code (docs.claude.com/claude-code) and add the Passport skills so the agent knows how to drive the CLI.

# Install Claude Code if you haven't already
curl -fsSL https://claude.ai/install.sh | bash

# Add the Kite Passport skill bundle
npx skills add gokite-ai/passport-skills/authenticate-user
npx skills add gokite-ai/passport-skills/request-session
npx skills add gokite-ai/passport-skills/x402-execute
npx skills add gokite-ai/passport-skills/wallet-send
npx skills add gokite-ai/passport-skills/manage-agents
npx skills add gokite-ai/passport-skills/activity

OpenAI Codex

Codex CLI supports shell tool-use out of the box. Install it, then point it at the same kpass binary.

# Install Codex CLI (login with your ChatGPT account)
npm install -g @openai/codex
# (or: brew install --cask codex on macOS)

# Then the same Passport install as above
curl -fsSL https://agentpassport.ai/install.sh | bash

# Talk to Codex in plain English:
#   "Use kpass to pay for https://weather.hugen.tokyo/weather/current?city=Tokyo
#    and summarise the result."

Exit codes cheat-sheet

Recovery recipes

• Session expired or budget exceeded: run kpass agent:session create … --ttl 1h --max-amount-per-tx 1 again, then kpass agent:session status --request-id <ID> --wait after passkey-approving the new approval URL.
• JWT expired (exit 3 from any user-auth command): kpass login init --email you@example.com → check email → kpass login verify --login-id <ID> --code <CODE>.
• Lost track of state? kpass status --output json always tells you the next exact command to run via the next_command field.
• Signup expired before you clicked the link? Re-run kpass signup init --email you@example.com --output json to get a fresh signup_id and link.
• Funding not yet arrived? Check kpass wallet balance --output json; for crypto, wait for chain confirmation; for card/ACH, check email for Banxa updates.
• Got HTTP 402 mid-flow? Your wallet is short on USDC. Top up via §03 — card/ACH or crypto transfer.

Where to get help

• Skills catalog: skills.sh