Skip to content
ECZ-IDDevelopers
Concepts: all pages

Concepts

Seven Passport families

ECZ-ID issues free Passports to seven families of machine: Agent, MCP, Plugin, API, IoT, SDK, and Service & Workload. Each family has a subject law that says what counts as one machine.

Live · public

Live in production and publicly readable, with no account and no key. Measured read-only on 2026-10-10.

Accountability Chain:Identity

The seven families

Facts from the TrustOps families contract. Availability is read live and never stored by this site.

Each family’s subject law decides what counts as one machine. One logical MCP server is one Passport, and its tools are never Passports. One logical service is one Passport, and pods, replicas and regions never are. A second deployment of the same machine is a binding, not a second identity.

The free lane, as its contract states it

  • No payment and no payment call: payment_required: false, payment_calls: 0.
  • One sign-in, because a Passport is issued to an operator and an operator has to be someone.
  • A parent at DECLARED or above, created for you if absent.
  • A Passport is not proof, and every reader re-checks before reliance.
  • A free Passport never claims the machine is safe, secure or correct, that ECZ-ID tested or approved it, or that its organisation was independently verified.

The earlier catalogue

Earlier versions of this site led with a catalogue of guided routes, credential domains and specialised child Passports. That material is preserved at its original addresses for reference and for existing links, and each preserved page says so. It is not the current launch model.

Related

This page is explanation, not authority. Current state is only ever the live Resolver record. Live facts on this page were measured read-only on 2026-10-10.