Enterprise

ServiceNow gives every AI agent a passport — and quietly raises the bar for anyone selling into enterprise

AI Passport, a cryptographically signed runtime credential for AI agents, is slated for Q4 2026 — and small B2B vendors should expect procurement teams to start asking harder questions about the agents in their sales stack.

By Asher Glick· Enterprise software desk·2026-10-18·3 min read

Photo: Unsplash / Taylor Vick — Rows of server racks with blue indicator lights inside a data center

On Oct. 15, 2026, ServiceNow announced AI Passport, a cryptographically signed runtime credential that enterprises can issue to every AI agent and Model Context Protocol server operating inside their walls. It’s an identity document for software, and like all identity documents it’s less interesting for what it grants than for what it’ll soon require.

AI Passport, shadow AI detection, and AI Cost Management inside IT Asset Management are expected in Q4 2026. NVIDIA is the design and launch partner, implementing the standard through its Open Agent Safety Platform, which pairs the open-source OpenShell runtime with the Sentry security framework. ServiceNow issues the credentials from its Super Intelligence Control Tower, grounded in the CMDB and GRC policies that already govern the rest of the enterprise stack.

“As AI agents proliferate across the enterprise, visibility alone isn’t enough,” said Jon Sigler, executive vice president and general manager, AI Platform at ServiceNow. The product’s premise is that audit logs tell you what an agent did; a passport tells you what it was ever allowed to do. “By implementing AI Passport with the NVIDIA Open Agent Safety Platform, ServiceNow customers can continuously verify and enforce what every agent is authorized to do — at machine speed and at runtime,” said Itay Ozery, NVIDIA’s director of Product Marketing for Networking and Cybersecurity.

The urgency is legible in ServiceNow’s own 2026 Banking AI Maturity Index: 100 percent of banks say they use AI, only 24 percent say their governance keeps pace. Reference customer LTM has already assigned HR-style accountability to its fleet. “As we accelerate LTM’s growth as an AI-led enterprise, we have deployed 1,500 AI agents across the organization, each assigned an employee ID and manager to ensure accountability, oversight, and continuous improvement,” said CISO Chandan Pani. Shadow AI detection ships with more than 400 out-of-box connectors to find the rest.

For small B2B vendors selling into these accounts, the downstream signal is unmistakable. After Cohere’s reusable North 2 agents and Salesforce baking ZoomInfo and Demandbase into Hunter, AI Passport closes the loop: the AI used to sell to the enterprise is about to be audited by the enterprise. Procurement questionnaires in 2027 won’t ask whether your outbound stack uses AI. They’ll ask whose credentials it carries.

Sources