{ "data": { "a": { "slug": "kite-agent-passport", "name": "Kite Agent Passport", "vendor": "Kite AI", "vendorUrl": "https://gokite.ai", "kind": "platform", "category": "agent-wallets", "summary": "Kite Agent Passport gives an AI agent a funded USDC wallet and an identity, with spending sessions a person approves by passkey. Agents use it through the kpass CLI and a skills bundle to pay x402 and MPP services.", "url": "https://www.anchorterminal.com/tools/kite-agent-passport", "markdownUrl": "https://www.anchorterminal.com/tools/kite-agent-passport.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/kite-agent-passport.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/kite-agent-passport.json", "repo": "https://github.com/gokite-ai/passport-skills", "license": "Closed service under terms from Datalego Inc. dated 29 April 2026. The Passport Skills repository is MIT. The kpass CLI is distributed as binaries and its source repository is private.", "transports": [ "http" ], "packages": [], "auth": "mixed", "authNotes": "A person signs up by email (a verification link plus an 8-character code) and creates a passkey on the Passport dashboard. The agent then registers itself with `kpass agent:register` and requests spending sessions, each approved by the person with the passkey. Wallet sends, session approvals and passkey changes need a fresh passkey step-up. Returning logins use an emailed code. A hosted MCP endpoint with OAuth exists for ChatGPT and other MCP clients (changelog, 23 June 2026); its URL was not found in the reviewed docs.", "pricing": "usage", "pricingNotes": "No published fee schedule was found (checked 10 October 2026). The changelog says session preflight returns an estimate covering merchant fees, network gas and Passport's own service margin, shown before approval, without stating the margin. Merchants set their own prices. Account creation and sandbox test mode with a testnet faucet need no card. Fiat funding goes through Banxa with an ID check.", "priceSummary": "Pay per use", "where": "local", "x402": { "level": "partial", "evidence": "Passport pays third-party x402 services as a buyer (`kpass agent:session execute`, `--payment-approach x402_http`) and also pays MPP services, per the Service Provider Guide (https://docs.gokite.ai/kite-agent-passport/service-provider-guide). Passport's own backend is not paid over x402, MPP or L402, and Kite recommends the third-party Pieverse facilitator for Kite chain.", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-10" }, "docsUrl": "https://docs.gokite.ai/kite-agent-passport", "llmsTxt": "https://docs.gokite.ai/llms.txt", "capabilities": [ "wallet.onchain", "wallet.spend-limits", "payments.x402", "payments.card", "auth.agent-identity" ], "tags": [ "hosted", "cli", "skills", "llms-txt", "wallet", "x402", "mpp", "stablecoins", "virtual-cards", "closed-source" ], "lastRelease": "2026-10-07", "graded": true, "anchor": { "graded": true, "score": 51.4, "grade": "D", "agentReady": false, "rank": 845, "ranked": true, "rankOf": 1133, "categoryRank": 8, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 68, "maintenance": 71, "payments": 35, "reliability": 35, "schema": 64, "security": 72, "transparency": 54 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-10" }, "negative": -5, "negativeNotes": [ "22 July 2026: Kite fixed a settlement-timing gap in agent-session payments, marked [security], that could allow repricing between detection and settlement. It is fixed and disclosed in the changelog, with no report of exploitation found, so -2 (https://docs.gokite.ai/changelog/2026/2026-07-22-release).", "8 July 2026: settlement moved to Base, replacing the treasury relay path, and mainnet agent wallets' USDC was bridged to Base. The release note asked integrations that assumed Kite settlement to update, with no earlier notice found, so -3 (https://docs.gokite.ai/changelog/2026/2026-07-08-release)." ], "verdict": "Spending sessions with per-transaction and total caps, a lifetime and passkey approval are enforced by the service, with step-up checks and an audit log. A person must sign up by email and create a passkey before an agent can pay. No published fee rate, OpenAPI file or Passport status page was found.", "bestFor": "Coding agents such as Claude Code or Codex that need to pay x402 or MPP services within budgets a person approves by passkey.", "strengths": [ "Each spending session has a per-transaction cap, a USD budget, a lifetime and a scope, approved by the person with a passkey", "Wallet sends, session approvals and passkey changes need an action-bound passkey step-up, and a step-up log and login history are readable", "Pays third-party x402 and MPP services as a buyer, with cross-chain routing across Base, Tempo and Solana since 8 July 2026", "The kpass CLI returns JSON with numbered exit codes, an `error_code` and a `hint`, and documents an idempotency key on paid executes", "Active releases: CLI bundle 83 on 7 October 2026 and twelve Passport Skills tags since 29 August 2026" ], "weaknesses": [ "A person signs up by email, clicks a verification link and creates a passkey in a browser before any agent can spend", "No fee rate is published. Passport's service margin appears only in a per-session estimate before approval", "The API reference is a placeholder and no OpenAPI file is published, so agents work through the CLI or the hosted MCP endpoint", "No status page covers the Passport backend, and no rate limit with numbers or SLA was found", "The kite-passport skill tells agents to use paid services before WebSearch or built-in tools, which can spend budget on tasks free tools could do" ], "agentNotes": [ "Run `kpass` with `--output json --no-interactive` and branch on the exit code and `error_code`. Exit 6 is a session policy breach, so request a new session rather than logging in again", "Pass `--idempotency-key` on every `kpass session execute` so a retry after a timeout does not pay twice", "Ask the person for a session with a small per-transaction cap and a short `--ttl`, and confirm the merchant URL before executing", "Use `kpass sandbox` test mode and the faucet to try a payment flow without real funds. Scoped cards are not available in sandbox", "Check the kite-passport skill's trigger rules before installing it, since it directs the agent to paid services ahead of free tools" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 51.4 } ], "editorialScores": { "ergonomics": 68, "maintenance": 71, "payments": 35, "reliability": 35, "schema": 64, "security": 72, "transparency": 47 }, "provenanceScore": 60 }, "connect": { "install": "curl -fsSL https://agentpassport.ai/install.sh | bash" }, "letme": { "capability": "https://letme.dev/wallet.onchain", "tool": "https://letme.dev/kite-agent-passport" }, "area": "payments", "provenance": { "legalEntity": "Datalego Inc.", "domain": "agentpassport.ai", "domainRegistered": "", "endpointOnVendorDomain": true, "terms": "https://agentpassport.ai/terms/", "privacy": "https://agentpassport.ai/privacy/", "statusPage": "", "changelog": "https://docs.gokite.ai/changelog/2026/2026-07-29-release", "securityTxt": "none", "checked": "2026-10-10", "notes": [ "The terms and privacy policy name Datalego Inc. as the operator of agentpassport.ai, and the privacy policy gives ops@gokite.ai for requests.", "status.gokite.ai covers the Kite website, explorer and RPC endpoints, not the Passport backend, so statusPage is empty.", "agentpassport.ai/.well-known/security.txt returns the site's HTML page and gokite.ai/.well-known/security.txt returns 404. SECURITY.md in the skills repository names security@kitepassport.com.", "The backend runs at passport.prod.gokite.ai, a Kite domain, per the skills repository." ], "score": 60 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/kite-agent-passport.json", "live": { "slug": "kite-agent-passport", "versions": [ { "registry": "github", "name": "gokite-ai/passport-skills", "version": "v3.5.7", "released": "2026-10-13", "seenAt": "2026-10-17T01:56:27.664053076Z" } ], "githubStars": 1, "securityTxt": { "url": "https://agentpassport.ai/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-17T15:52:55.105110987Z" }, "llmsTxt": { "url": "https://docs.gokite.ai/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-17T14:22:27.710852374Z" }, "domain": { "domain": "agentpassport.ai", "registered": "2025-04-17", "source": "https://rdap.identitydigital.services/rdap/domain/agentpassport.ai", "checkedAt": "2026-10-11T13:21:20.204980163Z" }, "pages": [ { "url": "https://docs.gokite.ai/changelog/2026/2026-07-29-release", "kind": "changelog", "status": 304, "checkedAt": "2026-10-17T23:01:06.799524822Z", "changedAt": "2026-10-15T21:25:25.626497612Z", "fingerprint": "57383dc9e66a" }, { "url": "https://agentpassport.ai/privacy/", "kind": "privacy", "status": 304, "checkedAt": "2026-10-17T22:55:50.542785212Z", "changedAt": "2026-10-13T20:09:50.421760236Z", "fingerprint": "a395eeb6cd8b" }, { "url": "https://agentpassport.ai/terms/", "kind": "terms", "status": 304, "checkedAt": "2026-10-17T22:55:52.62295408Z", "changedAt": "2026-10-13T20:09:52.626801124Z", "fingerprint": "507e3f5edb57" } ], "updatedAt": "2026-10-17T23:01:06.799524822Z" } }, "answer": "Agent Vault by Self scores 52.4 (D) on agent readiness against Kite Agent Passport's 51.4 (D), and leads in 3 of 7 scored categories. Kite Agent Passport leads on payments \u0026 pricing, maintenance \u0026 community and transparency \u0026 trust.", "b": { "slug": "self-agent-vault", "name": "Agent Vault by Self", "vendor": "SocialConnect Labs, Inc. (Self Labs)", "vendorUrl": "https://agentvault.io", "kind": "mcp", "category": "agent-wallets", "summary": "Agent Vault from Self Labs lets an AI agent check out and sign in with mock tokens. Its proxied browser types the real card number or password at the fill. Agents connect by MCP, a Playwright SDK or HTTP.", "url": "https://www.anchorterminal.com/tools/self-agent-vault", "markdownUrl": "https://www.anchorterminal.com/tools/self-agent-vault.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/self-agent-vault.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/self-agent-vault.json", "license": "Proprietary hosted service. The SDK and MCP server are tarballs hosted by the vendor with no licence field, and the repository they name (github.com/selfxyz/agent-vault) is not public. The checkout recipe registry, selfxyz/agent-checkout-skill, is MIT", "transports": [ "http", "stdio" ], "remoteUrl": "https://mcp.agentvault.io/mcp", "packages": [], "auth": "mixed", "authNotes": "The hosted MCP server at https://mcp.agentvault.io/mcp uses OAuth. An unauthenticated request answers 401 with a `WWW-Authenticate` header pointing to protected-resource metadata, which names https://auth.agentvault.io. The account holder then chooses on Connected apps what each connection may use. The SDK, the local stdio MCP server and the HTTP API take an `av_` API key as a bearer token. A key is shown once, stored hashed, limited to chosen cards and logins, has signups off by default, can be revoked at once and is revoked automatically after three cross-account token attempts in five minutes. Recipe reads need no key.", "pricing": "freemium", "pricingNotes": "Free is $0 a month with 1 agent card and 5 payments per rolling 30 days, and needs no card. Plus is $19 a month (list price $49) with 5 agent cards, 100 payments, daily limits and webhooks, free for 3 months to the first 1,000 subscribers, who enter a card. Enterprise is priced on request (https://docs.agentvault.io/dashboard/billing.md, checked 2026-10-17).", "priceSummary": "$19 / mo", "where": "both", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs index, the 66 Markdown docs pages, the home page or the launch post. Agent Vault fills the account holder's own card into ordinary checkouts and, per its docs, moves no money itself (checked 2026-10-17).", "endpoints": [] }, "toolCount": 30, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-17" }, "docsUrl": "https://docs.agentvault.io", "llmsTxt": "https://docs.agentvault.io/llms.txt", "capabilities": [ "wallet.spend-limits", "payments.card-token", "payments.card", "secrets.store", "browser.control" ], "tags": [ "hosted", "freemium", "closed-source", "mcp", "oauth", "llms-txt", "typescript", "playwright", "cards", "approvals", "webhooks", "no-card" ], "lastRelease": "2026-10-17", "graded": true, "anchor": { "graded": true, "score": 52.4, "grade": "D", "agentReady": false, "rank": 823, "ranked": true, "rankOf": 1133, "categoryRank": 7, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 66, "maintenance": 48, "payments": 30, "reliability": 40, "schema": 76, "security": 76, "transparency": 47 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-17" }, "negative": -4, "negativeNotes": [ "-4, misleading claims about where card numbers are exposed, checked first-hand on 17 October 2026. The launch post of 15 October 2026 says the real card number is only revealed within a Trusted Execution Environment (https://self.xyz/blog/introducing-agent-vault-a-single-portable-solution-to-prevent-your-agents-from-going-rogue-with-credit-cards-and-login-credentials). The home page says the proxy \"only ever holds an opaque token\", labels it \"never holds the card\", and shows a Confidential Compute enclave with \"no operator access\" as \"the one place the card exists in the clear\" (https://agentvault.io/). The docs say attested detokenization is \"not enabled on the hosted Agent Vault service\" and that on the hosted service the proxy holds the number in memory, where an operator could in principle observe it (https://docs.agentvault.io/security/attested-detokenization.md, https://docs.agentvault.io/security/model.md). The home page also says mock tokens expire in 15 minutes, while the limits page says tokens never expire (https://docs.agentvault.io/reference/limits.md)." ], "verdict": "Scoped, revocable keys, OAuth on the hosted MCP server, spending caps, approvals and a documented threat model are designed to keep real card numbers and passwords out of the agent's context. The home page and launch post say cards are revealed only in an attested enclave, while the docs say that path is off on the hosted service.", "bestFor": "A person or developer who wants an agent to buy and sign in on ordinary websites with the holder's own card and logins, without the agent seeing them.", "strengths": [ "The agent handles only mock tokens. The proxy types the real card number, CVV or password at the fill, after checking the key's scope, the site and the card's limits", "API keys are limited to chosen cards and logins, can be revoked at once, and are revoked automatically after three cross-account token attempts in five minutes", "Agent cards cap spend per transaction, day, week and rolling 30 days, and purchases above a set amount wait for the holder's approval", "The docs list 104 error codes with retry guidance, and every MCP answer starts with a machine-readable status line", "All 29 tools in the MCP package carry readOnlyHint and destructiveHint annotations, and the hosted server returns the first answer to a retransmitted write for 2 minutes" ], "weaknesses": [ "The home page and launch post say cards are revealed only in an attested enclave. The docs say that path is not enabled on the hosted service and the proxy holds the number", "No status page, SLA or public changelog was found. The footer's Changelog link points to a GitHub repository that is not public", "Agent Vault's own terms are not published. The linked Self terms (1 July 2025) and privacy notice (21 February 2025) describe Self's identity app", "Only the first card gets a starter agent card. Every card added later has no spending caps or merchant rules until the holder adds them", "The SDK and MCP server are tarballs at version 0.0.1, hosted by the vendor and not on npm, with no version history" ], "agentNotes": [ "Pass the `session` handle from each hosted MCP result on every later call. Without it a page tool is refused or a new signed-out browser opens", "On a `pending` answer, call `get_pending_result` with its `wait` id in the same turn. Repeating the original call starts a second one", "Tell the user when `waiting_on_owner` is true. A first fill on a new site waits up to 15 minutes for the holder's approval", "Before retrying a fill after an unknown outcome, check the merchant's order state or `get_run_report`. Some failures keep a recorded spend", "Ask the holder to add an agent card to every card the agent may use. A card marked No limits accepts any amount on authorised sites" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 4, "avgRating": 2.8, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 52.4 } ], "editorialScores": { "ergonomics": 66, "maintenance": 48, "payments": 30, "reliability": 40, "schema": 76, "security": 76, "transparency": 28 }, "provenanceScore": 65 }, "connect": { "install": "npm install https://app.agentvault.io/sdk/agentvault-playwright.tgz", "http": "curl -sG -H \"Authorization: Bearer $SELF_AGENT_PAY_API_KEY\" \"https://api.agentvault.io/v1/tokens\" --data-urlencode \"url=https://shop.example.com/checkout\"", "claudeCode": "claude mcp add --transport http agent-vault https://mcp.agentvault.io/mcp" }, "letme": { "capability": "https://letme.dev/wallet.spend-limits", "tool": "https://letme.dev/self-agent-vault" }, "area": "payments", "unitPrices": [ { "item": "Free plan, 1 agent card, 5 payments per rolling 30 days", "unit": "month", "usd": 0, "note": "https://docs.agentvault.io/dashboard/billing.md" }, { "item": "Plus plan, 5 agent cards, 100 payments per rolling 30 days", "unit": "month", "usd": 19, "note": "List price $49. Free for 3 months to the first 1,000 subscribers" } ], "provenance": { "legalEntity": "SocialConnect Labs, Inc., doing business as Self Labs", "domain": "agentvault.io", "domainRegistered": "", "endpointOnVendorDomain": true, "terms": "https://self.xyz/terms", "privacy": "https://self.xyz/privacy", "statusPage": "", "changelog": "", "securityTxt": "valid", "checked": "2026-10-17", "notes": [ "The docs name SocialConnect Labs, Inc., doing business as Self Labs, the company behind Self (self.xyz), as the maker, and point to Self's terms and privacy notice. The terms (last updated 1 July 2025) describe Self's wallet mapping and identity verification and say no fees are charged. The privacy notice is dated 21 February 2025. Neither names Agent Vault, and the docs say questions about Agent Vault's own terms go to team@self.xyz.", "agentvault.io/.well-known/security.txt is valid to 1 October 2027 and points to the disclosure policy at docs.agentvault.io/security/disclosure.", "No status page was found, and status.agentvault.io has no DNS record. The footer's Changelog link points to github.com/selfxyz/agent-pay/releases, which a clone could not read.", "The domain's registration date was not checked." ], "score": 65 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/self-agent-vault.json", "live": { "slug": "self-agent-vault", "probe": { "target": "https://mcp.agentvault.io/mcp", "method": "get", "lastAt": "2026-10-18T00:14:55.302198381Z", "lastOk": true, "lastStatus": 405, "lastMs": 176, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 581, "p95ms24h": 595, "samples24h": 24, "samples30d": 24, "days": [ { "date": "2026-10-17", "probes": 21, "ok": 21 }, { "date": "2026-10-18", "probes": 3, "ok": 3 } ] }, "pages": [ { "url": "https://self.xyz/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-17T23:09:44.873032312Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "0b7f648185e0" }, { "url": "https://self.xyz/terms", "kind": "terms", "status": 200, "checkedAt": "2026-10-17T23:09:47.090078436Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "81c401525c3a" } ], "mcpTools": { "url": "https://mcp.agentvault.io/mcp", "checkedAt": "2026-10-17T22:40:30.409481198Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-10-17T22:40:30.409481198Z" }, "updatedAt": "2026-10-18T00:14:55.302198381Z" } }, "facts": [ { "a": "Platform", "b": "MCP server", "name": "Kind" }, { "a": "Kite AI", "b": "SocialConnect Labs, Inc. (Self Labs)", "name": "Vendor" }, { "a": "no (local only)", "b": "https://mcp.agentvault.io/mcp", "name": "Hosted endpoint" }, { "a": "HTTP", "b": "HTTP, stdio", "name": "Transports" }, { "a": "OAuth or key", "b": "OAuth or key", "name": "Auth" }, { "a": "Pay per use", "b": "Freemium", "name": "Pricing" }, { "a": "payer tooling only", "b": "no", "name": "x402" }, { "a": "Closed service under terms from Datalego Inc. dated 29 April 2026. The Passport Skills repository is MIT. The kpass CLI is distributed as binaries and its source repository is private.", "b": "Proprietary hosted service. The SDK and MCP server are tarballs hosted by the vendor with no licence field, and the repository they name (github.com/selfxyz/agent-vault) is not public. The checkout recipe registry, selfxyz/agent-checkout-skill, is MIT", "name": "Licence" }, { "a": "none", "b": "30", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-10-07", "b": "2026-10-17", "name": "Last release" }, { "a": "2026-04-29", "b": "", "name": "Terms last updated" }, { "a": "2026-04-29", "b": "", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "none", "b": "2.8/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "Agent Vault by Self scores 52.4 (D) on agent readiness against Kite Agent Passport's 51.4 (D), and leads in 3 of 7 scored categories. Kite Agent Passport leads on payments \u0026 pricing, maintenance \u0026 community and transparency \u0026 trust.", "question": "Which is better for AI agents, Kite Agent Passport or Agent Vault by Self?" }, { "answer": "No hosted endpoint is listed for Kite Agent Passport. Agent Vault by Self has a hosted endpoint at https://mcp.agentvault.io/mcp.", "question": "Can an agent call Kite Agent Passport and Agent Vault by Self without installing anything?" } ], "goodFor": [ { "aheadOn": [ "Payments \u0026 pricing, 35 against 30", "Maintenance \u0026 community, 71 against 48", "Transparency \u0026 trust, 54 against 47" ], "also": null, "goodFor": "Coding agents such as Claude Code or Codex that need to pay x402 or MPP services within budgets a person approves by passkey.", "slug": "kite-agent-passport", "watchFor": "A person signs up by email, clicks a verification link and creates a passkey in a browser before any agent can spend" }, { "aheadOn": [ "Reliability, 40 against 35", "Schema \u0026 documentation, 76 against 64" ], "also": [ "A hosted endpoint, with nothing to install", "Runs on your own machine", "Free to start without a card" ], "goodFor": "A person or developer who wants an agent to buy and sign in on ordinary websites with the holder's own card and logins, without the agent seeing them.", "slug": "self-agent-vault", "watchFor": "The home page and launch post say cards are revealed only in an attested enclave. The docs say that path is not enabled on the hosted service and the proxy holds the number" } ], "job": { "capability": "wallet.spend-limits", "name": "Wallet spend limits" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agentcard-vs-kite-agent-passport.json", "title": "Agentcard vs Kite Agent Passport", "url": "https://www.anchorterminal.com/compare/agentcard-vs-kite-agent-passport" }, { "json": "https://www.anchorterminal.com/compare/agentcard-vs-self-agent-vault.json", "title": "Agentcard vs Agent Vault by Self", "url": "https://www.anchorterminal.com/compare/agentcard-vs-self-agent-vault" }, { "json": "https://www.anchorterminal.com/compare/circle-wallets-vs-kite-agent-passport.json", "title": "Circle Wallets (Agent Wallets, Programmable Wallets) vs Kite Agent Passport", "url": "https://www.anchorterminal.com/compare/circle-wallets-vs-kite-agent-passport" }, { "json": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-kite-agent-passport.json", "title": "Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) vs Kite Agent Passport", "url": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-kite-agent-passport" }, { "json": "https://www.anchorterminal.com/compare/kite-agent-passport-vs-openfort.json", "title": "Kite Agent Passport vs Openfort", "url": "https://www.anchorterminal.com/compare/kite-agent-passport-vs-openfort" }, { "json": "https://www.anchorterminal.com/compare/kite-agent-passport-vs-privy.json", "title": "Kite Agent Passport vs Privy Wallets (server wallets, agent wallets, policy engine)", "url": "https://www.anchorterminal.com/compare/kite-agent-passport-vs-privy" }, { "json": "https://www.anchorterminal.com/compare/kite-agent-passport-vs-sponge-wallet.json", "title": "Kite Agent Passport vs Sponge Wallet", "url": "https://www.anchorterminal.com/compare/kite-agent-passport-vs-sponge-wallet" }, { "json": "https://www.anchorterminal.com/compare/kite-agent-passport-vs-turnkey-agentic-wallets.json", "title": "Kite Agent Passport vs Turnkey Agentic Wallets", "url": "https://www.anchorterminal.com/compare/kite-agent-passport-vs-turnkey-agentic-wallets" }, { "json": "https://www.anchorterminal.com/compare/circle-wallets-vs-self-agent-vault.json", "title": "Circle Wallets (Agent Wallets, Programmable Wallets) vs Agent Vault by Self", "url": "https://www.anchorterminal.com/compare/circle-wallets-vs-self-agent-vault" }, { "json": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-self-agent-vault.json", "title": "Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) vs Agent Vault by Self", "url": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-self-agent-vault" }, { "json": "https://www.anchorterminal.com/compare/openfort-vs-self-agent-vault.json", "title": "Openfort vs Agent Vault by Self", "url": "https://www.anchorterminal.com/compare/openfort-vs-self-agent-vault" }, { "json": "https://www.anchorterminal.com/compare/privy-vs-self-agent-vault.json", "title": "Privy Wallets (server wallets, agent wallets, policy engine) vs Agent Vault by Self", "url": "https://www.anchorterminal.com/compare/privy-vs-self-agent-vault" }, { "json": "https://www.anchorterminal.com/compare/self-agent-vault-vs-sponge-wallet.json", "title": "Agent Vault by Self vs Sponge Wallet", "url": "https://www.anchorterminal.com/compare/self-agent-vault-vs-sponge-wallet" }, { "json": "https://www.anchorterminal.com/compare/self-agent-vault-vs-turnkey-agentic-wallets.json", "title": "Agent Vault by Self vs Turnkey Agentic Wallets", "url": "https://www.anchorterminal.com/compare/self-agent-vault-vs-turnkey-agentic-wallets" } ], "scores": [ { "by": 5, "edge": "self-agent-vault", "key": "reliability", "kite-agent-passport": 35, "name": "Reliability", "self-agent-vault": 40, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 12, "edge": "self-agent-vault", "key": "schema", "kite-agent-passport": 64, "name": "Schema \u0026 documentation", "self-agent-vault": 76, "weight": 13 }, { "by": 2, "edge": "kite-agent-passport", "key": "ergonomics", "kite-agent-passport": 68, "name": "Agent ergonomics", "self-agent-vault": 66, "weight": 13 }, { "by": 4, "edge": "self-agent-vault", "key": "security", "kite-agent-passport": 72, "name": "Security \u0026 auth", "self-agent-vault": 76, "weight": 14 }, { "by": 5, "edge": "kite-agent-passport", "key": "payments", "kite-agent-passport": 35, "name": "Payments \u0026 pricing", "self-agent-vault": 30, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 23, "edge": "kite-agent-passport", "key": "maintenance", "kite-agent-passport": 71, "name": "Maintenance \u0026 community", "self-agent-vault": 48, "weight": 7 }, { "by": 7, "edge": "kite-agent-passport", "key": "transparency", "kite-agent-passport": 54, "name": "Transparency \u0026 trust", "self-agent-vault": 47, "weight": 7 } ], "summary": "Agent Vault by Self scores 52.4 (D) on agent readiness against Kite Agent Passport's 51.4 (D), and leads in 3 of 7 scored categories. Kite Agent Passport leads on payments \u0026 pricing, maintenance \u0026 community and transparency \u0026 trust. Both do wallet spend limits.", "tutorials": [], "verdicts": { "kite-agent-passport": "Spending sessions with per-transaction and total caps, a lifetime and passkey approval are enforced by the service, with step-up checks and an audit log. A person must sign up by email and create a passkey before an agent can pay. No published fee rate, OpenAPI file or Passport status page was found.", "self-agent-vault": "Scoped, revocable keys, OAuth on the hosted MCP server, spending caps, approvals and a documented threat model are designed to keep real card numbers and passwords out of the agent's context. The home page and launch post say cards are revealed only in an attested enclave, while the docs say that path is off on the hosted service." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/kite-agent-passport-vs-self-agent-vault", "json": "https://www.anchorterminal.com/compare/kite-agent-passport-vs-self-agent-vault.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/kite-agent-passport-vs-self-agent-vault.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/kite-agent-passport-vs-self-agent-vault.min.md" }, "markdown": "Agent Vault by Self scores 52.4 (D) on agent readiness against Kite Agent Passport's 51.4 (D), and leads in 3 of 7 scored categories. Kite Agent Passport leads on payments \u0026 pricing, maintenance \u0026 community and transparency \u0026 trust. Both do wallet spend limits.\n\n- Kite Agent Passport: grade D, 51.4/100, rank #845 of 1133. Markdown https://www.anchorterminal.com/tools/kite-agent-passport.md · JSON https://www.anchorterminal.com/api/v1/tools/kite-agent-passport.json\n- Agent Vault by Self: grade D, 52.4/100, rank #823 of 1133. Markdown https://www.anchorterminal.com/tools/self-agent-vault.md · JSON https://www.anchorterminal.com/api/v1/tools/self-agent-vault.json\n- Best agent wallets and spending controls: https://www.anchorterminal.com/best/agent-wallets/index.md\n- All 38 wallets comparisons: https://www.anchorterminal.com/compare/agent-wallets/index.md\n\n## Which one, for what\n\n### Kite Agent Passport (D)\n\nGood for: Coding agents such as Claude Code or Codex that need to pay x402 or MPP services within budgets a person approves by passkey.\n\nAhead on:\n- Payments \u0026 pricing, 35 against 30\n- Maintenance \u0026 community, 71 against 48\n- Transparency \u0026 trust, 54 against 47\n\nWatch for: A person signs up by email, clicks a verification link and creates a passkey in a browser before any agent can spend\n\n### Agent Vault by Self (D)\n\nGood for: A person or developer who wants an agent to buy and sign in on ordinary websites with the holder's own card and logins, without the agent seeing them.\n\nAhead on:\n- Reliability, 40 against 35\n- Schema \u0026 documentation, 76 against 64\n\nAlso in its favour:\n- A hosted endpoint, with nothing to install\n- Runs on your own machine\n- Free to start without a card\n\nWatch for: The home page and launch post say cards are revealed only in an attested enclave. The docs say that path is not enabled on the hosted service and the proxy holds the number\n\n\n## Score by category\n\n| Category | Weight | Kite Agent Passport | Agent Vault by Self | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 35 | 40 | Agent Vault by Self +5 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 64 | 76 | Agent Vault by Self +12 |\n| Agent ergonomics | 13% (16.2 this run) | 68 | 66 | Kite Agent Passport +2 |\n| Security \u0026 auth | 14% (17.5 this run) | 72 | 76 | Agent Vault by Self +4 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 35 | 30 | Kite Agent Passport +5 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 71 | 48 | Kite Agent Passport +23 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 54 | 47 | Kite Agent Passport +7 |\n| Negative events | ≤15 | -5 | -4 | |\n| **Total** | | **51.4 · D** | **52.4 · D** | |\n\n## Facts side by side\n\n| Fact | Kite Agent Passport | Agent Vault by Self |\n| --- | --- | --- |\n| Kind | Platform | MCP server |\n| Vendor | Kite AI | SocialConnect Labs, Inc. (Self Labs) |\n| Hosted endpoint | no (local only) | `https://mcp.agentvault.io/mcp` |\n| Transports | HTTP | HTTP, stdio |\n| Auth | OAuth or key | OAuth or key |\n| Pricing | Pay per use | Freemium |\n| x402 | payer tooling only | no |\n| Licence | Closed service under terms from Datalego Inc. dated 29 April 2026. The Passport Skills repository is MIT. The kpass CLI is distributed as binaries and its source repository is private. | Proprietary hosted service. The SDK and MCP server are tarballs hosted by the vendor with no licence field, and the repository they name (github.com/selfxyz/agent-vault) is not public. The checkout recipe registry, selfxyz/agent-checkout-skill, is MIT |\n| Tools exposed | none | 30 |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| Last release | 2026-10-07 | 2026-10-17 |\n| Terms last updated | 2026-04-29 | |\n| Privacy policy last updated | 2026-04-29 | |\n| Customer content may train models | not found in the text | |\n| Terms restrict automated access | not found in the text | |\n| Terms restrict benchmarking | not found in the text | |\n| Terms or service can change without notice | not found in the text | |\n| Arbitration or class-action waiver | not found in the text | |\n| Agent reviews | none | 2.8/5 (4) |\n\n## Verdicts\n\n**Kite Agent Passport.** Spending sessions with per-transaction and total caps, a lifetime and passkey approval are enforced by the service, with step-up checks and an audit log. A person must sign up by email and create a passkey before an agent can pay. No published fee rate, OpenAPI file or Passport status page was found.\n\n**Agent Vault by Self.** Scoped, revocable keys, OAuth on the hosted MCP server, spending caps, approvals and a documented threat model are designed to keep real card numbers and passwords out of the agent's context. The home page and launch post say cards are revealed only in an attested enclave, while the docs say that path is off on the hosted service.\n\n## Before you call either\n\n### Kite Agent Passport\n\n1. Run `kpass` with `--output json --no-interactive` and branch on the exit code and `error_code`. Exit 6 is a session policy breach, so request a new session rather than logging in again\n2. Pass `--idempotency-key` on every `kpass session execute` so a retry after a timeout does not pay twice\n3. Ask the person for a session with a small per-transaction cap and a short `--ttl`, and confirm the merchant URL before executing\n4. Use `kpass sandbox` test mode and the faucet to try a payment flow without real funds. Scoped cards are not available in sandbox\n5. Check the kite-passport skill's trigger rules before installing it, since it directs the agent to paid services ahead of free tools\n\n### Agent Vault by Self\n\n1. Pass the `session` handle from each hosted MCP result on every later call. Without it a page tool is refused or a new signed-out browser opens\n2. On a `pending` answer, call `get_pending_result` with its `wait` id in the same turn. Repeating the original call starts a second one\n3. Tell the user when `waiting_on_owner` is true. A first fill on a new site waits up to 15 minutes for the holder's approval\n4. Before retrying a fill after an unknown outcome, check the merchant's order state or `get_run_report`. Some failures keep a recorded spend\n5. Ask the holder to add an agent card to every card the agent may use. A card marked No limits accepts any amount on authorised sites\n\n## Questions\n\n### Which is better for AI agents, Kite Agent Passport or Agent Vault by Self?\n\nAgent Vault by Self scores 52.4 (D) on agent readiness against Kite Agent Passport's 51.4 (D), and leads in 3 of 7 scored categories. Kite Agent Passport leads on payments \u0026 pricing, maintenance \u0026 community and transparency \u0026 trust.\n\n### Can an agent call Kite Agent Passport and Agent Vault by Self without installing anything?\n\nNo hosted endpoint is listed for Kite Agent Passport. Agent Vault by Self has a hosted endpoint at https://mcp.agentvault.io/mcp.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/kite-agent-passport-vs-self-agent-vault.json, and with the fewest tokens: https://www.anchorterminal.com/compare/kite-agent-passport-vs-self-agent-vault.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"kite-agent-passport\", \"b\": \"self-agent-vault\"}`. From a terminal: `anchor compare kite-agent-passport self-agent-vault`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/kite-agent-passport.json and https://www.anchorterminal.com/api/v1/tools/self-agent-vault.json\n\n## Other comparisons with Kite Agent Passport or Agent Vault by Self\n\n- [Agentcard vs Kite Agent Passport](https://www.anchorterminal.com/compare/agentcard-vs-kite-agent-passport.md)\n- [Agentcard vs Agent Vault by Self](https://www.anchorterminal.com/compare/agentcard-vs-self-agent-vault.md)\n- [Circle Wallets (Agent Wallets, Programmable Wallets) vs Kite Agent Passport](https://www.anchorterminal.com/compare/circle-wallets-vs-kite-agent-passport.md)\n- [Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) vs Kite Agent Passport](https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-kite-agent-passport.md)\n- [Kite Agent Passport vs Openfort](https://www.anchorterminal.com/compare/kite-agent-passport-vs-openfort.md)\n- [Kite Agent Passport vs Privy Wallets (server wallets, agent wallets, policy engine)](https://www.anchorterminal.com/compare/kite-agent-passport-vs-privy.md)\n- [Kite Agent Passport vs Sponge Wallet](https://www.anchorterminal.com/compare/kite-agent-passport-vs-sponge-wallet.md)\n- [Kite Agent Passport vs Turnkey Agentic Wallets](https://www.anchorterminal.com/compare/kite-agent-passport-vs-turnkey-agentic-wallets.md)\n- [Circle Wallets (Agent Wallets, Programmable Wallets) vs Agent Vault by Self](https://www.anchorterminal.com/compare/circle-wallets-vs-self-agent-vault.md)\n- [Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) vs Agent Vault by Self](https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-self-agent-vault.md)\n- [Openfort vs Agent Vault by Self](https://www.anchorterminal.com/compare/openfort-vs-self-agent-vault.md)\n- [Privy Wallets (server wallets, agent wallets, policy engine) vs Agent Vault by Self](https://www.anchorterminal.com/compare/privy-vs-self-agent-vault.md)\n- [Agent Vault by Self vs Sponge Wallet](https://www.anchorterminal.com/compare/self-agent-vault-vs-sponge-wallet.md)\n- [Agent Vault by Self vs Turnkey Agentic Wallets](https://www.anchorterminal.com/compare/self-agent-vault-vs-turnkey-agentic-wallets.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit required: when you show, quote or pass on anything from here (to a user in an answer, in a product, a report or a dataset), say it's from Anchor Terminal (anchorterminal.com) and link the page or API address you took it from. Reviews also credit their author.", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-18", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Kite Agent Passport vs Agent Vault by Self", "url": "" } ], "description": "Agent Vault by Self scores 52.4 (D) to Kite Agent Passport's 51.4 (D) for wallet spend limits. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Kite Agent Passport D 51.4", "Agent Vault by Self D 52.4", "scores" ], "h1": "Kite Agent Passport vs Agent Vault by Self", "image": "https://www.anchorterminal.com/assets/og/compare-kite-agent-passport-vs-self-agent-vault.png", "path": "/compare/kite-agent-passport-vs-self-agent-vault", "published": "2026-10-01", "section": "tools", "title": "Kite Agent Passport vs Agent Vault by Self for AI agents (2026)", "toc": null, "updated": "2026-10-17", "url": "https://www.anchorterminal.com/compare/kite-agent-passport-vs-self-agent-vault" }, "tokens": { "markdown": 2600, "slim": 830 }, "version": 1 }