ServiceNow Gives Every Enterprise AI Agent an Identity and a Leash

30-Second Summary

ServiceNow announced AI Passport on October 15, 2026, a new layer of runtime control designed to govern every AI agent operating inside an enterprise. Each agent receives a cryptographically signed credential that records its identity, the systems it is authorised to access, the actions it is permitted to take, and the person accountable for its behaviour. If an agent acts outside that scope, responses range from redirection and restriction through to a full kill switch. The announcement also widened the company's Super Intelligence Control Tower platform to include shadow AI detection, AI cost tracking by user and department, and more than 400 third-party vendor connectors. Most capabilities are expected to be generally available by end of 2026.

At a Glance

• Topic: AI Security
• Company: ServiceNow
• Date: 15 October 2026
• Announcement: ServiceNow launched AI Passport, a signed credential and governance system for enterprise AI agents
• What Changed: Enterprises can now issue verifiable identities to agents, define their permitted actions, and terminate them at runtime if they drift outside scope
• Why It Matters: Organisations are running agents without adequate controls; AI Passport creates an enforceable standard for agent identity and authorisation
• Who Should Care: Any business deploying AI agents in operations, customer service, finance, HR, or IT workflows

Key Facts

• Company: ServiceNow
• Launch Date: 15 October 2026
• What Changed: AI Passport adds a cryptographically signed credential to each AI agent, covering identity, permitted actions, accessible systems, and accountable owner
• Who It Affects: Enterprises and mid-market organisations deploying AI agents, including those using third-party agents and MCP servers alongside ServiceNow's own
• Primary Source: ServiceNow press release, 15 October 2026, with coverage from CIO, InfoWorld, HPC Wire, Diginomica, and Futurum Group

What Happened

ServiceNow announced AI Passport on 15 October 2026 as part of an expanded set of governance capabilities built into its Super Intelligence Control Tower (SICT). AI Passport issues a cryptographically signed credential to every AI agent operating inside an enterprise. That credential records four things: the agent's identity, the systems it is authorised to access, the actions it is permitted to perform, and the person or team accountable for its behaviour.

The enforcement is runtime, not retrospective. If an agent attempts to act outside the scope defined in its credential, the SICT can redirect it, restrict its access, reconnect it with corrected context, or terminate it entirely. Every action an agent takes is logged, creating an auditable record of what happened and when. The system covers third-party agents and MCP servers as well as ServiceNow's own, meaning enterprises can apply a consistent governance standard across a mixed agent environment.

ServiceNow also announced that the Super Intelligence Control Tower now includes shadow AI detection, giving IT and security teams visibility into AI tools running inside the business that have not been formally approved or inventoried. A new AI Cost Management module tracks AI spending by user, department, and runtime, providing operators with the data to understand where money is going across agent deployments. More than 400 vendor connectors have been added to support discovery and monitoring across enterprise systems. NVIDIA is the first launch partner, with enforcement integrated through its Open Agent Safety Platform.

ServiceNow's own 2026 Banking AI Maturity Index, cited in the announcement, found that 100 per cent of banks surveyed are using AI, but only 24 per cent have governance frameworks in place to manage that use. Most features, including AI Passport, shadow AI detection, and AI Cost Management, are expected to reach general availability in Q4 2026. ServiceNow's Operational Resilience offering for financial services is available immediately.

Why It Matters

• AI agents are now running inside enterprises at scale, but most organisations lack any formal system for tracking what those agents are permitted to do or what they have actually done
• The absence of agent-level identity and permissioning creates regulatory, security, and operational risk: if an agent accesses data it should not, there is often no record of it having done so
• Extending governance to third-party agents and MCP servers reflects the reality that enterprise AI environments are heterogeneous: most organisations use multiple vendors, not just one
• Shadow AI, employees using AI tools the business has not approved or reviewed, is an active and growing exposure that most organisations have not systematically addressed
• The combination of identity, permissioning, cost tracking, and audit logging in one platform reduces the number of separate tools an enterprise needs to govern its agent estate
• Analysts have noted that most agent governance today operates like a security camera: it records what happened for review later rather than preventing out-of-scope actions in real time. AI Passport shifts this toward prevention

The David and Goliath View

For years, the standard advice on AI governance was to write a policy and run training. That advice has not kept pace with how quickly agents are being deployed. A policy document does not stop an agent from reading a file it should not. A training session does not create a log of what your customer-service bot accessed last Tuesday. The organisations now pulling ahead are not the ones with the best AI policy documents; they are the ones treating agents as systems that need the same identity and access controls applied to any other system in their infrastructure.

ServiceNow's AI Passport is built for large enterprises, and most operators running companies with 10 to 200 employees will not be purchasing ServiceNow licenses this quarter. But the framework it enforces, that every agent has a defined identity, a bounded scope, and an audit trail, is the right one regardless of scale. The smallest version of that framework is a spreadsheet: agent name, what it can access, what it cannot, who is accountable. That is achievable today and it is the foundation of anything more sophisticated later.

The concrete recommendation: before deploying your next AI agent, write its permissions down as a document rather than leaving them implied. Treat the exercise the way you would onboarding a new employee who has access to your systems. That discipline, applied consistently, is what separates businesses that will manage their AI exposure well from those that will not.

Where This Fits in the AI Stack

Secure AI Brain: AI Passport directly addresses the governance layer of a secure AI deployment. It establishes who agents are, what they can do, and maintains a record of every action, which is the foundational requirement for any organisation that wants to run AI agents without accumulating hidden risk.

Employee Amplification Systems: Shadow AI detection and cost tracking feed back into how employees use AI day to day. Understanding which tools are in use, at what cost, and with what level of authorisation is necessary for building a coherent, well-governed agent estate that genuinely amplifies team output rather than creating undocumented exposure.

Questions Operators Are Asking

What is AI Passport in plain terms? Think of it as an employee access card for AI agents. Just as a new staff member receives a badge that determines which doors they can open and which systems they can log into, AI Passport issues each agent a signed credential that records what it is allowed to do. If the agent tries to go beyond that, the system can stop it and log the attempt.

Do I need ServiceNow to apply these principles? No. The governance framework ServiceNow has formalised, identity, scope, accountability, audit log, can be implemented at any scale. For a small business, it starts with documentation: write down what each AI tool or agent is authorised to do and who is responsible for it. That is the minimum viable version of the same concept.

What is shadow AI and why does it matter? Shadow AI refers to AI tools employees are using inside the business that the organisation has not formally approved, reviewed, or inventoried. It matters because those tools may be accessing business data, generating outputs on behalf of the company, or creating compliance exposure without anyone in leadership knowing. Discovering and documenting those tools is the first step toward managing the risk.

How does this change what I should ask AI vendors? Ask any AI vendor whether their products produce agent-level audit logs, whether they support permission scoping at the agent level, and whether they can integrate with your existing identity and access management systems. If a vendor cannot answer those questions clearly, that is a signal to weight in your procurement decisions.

When will AI Passport be available? ServiceNow has indicated that AI Passport, shadow AI detection, and AI Cost Management are expected to reach general availability in Q4 2026. ServiceNow's Operational Resilience offering for financial services was made available immediately at the October 15 announcement.

Citable Summary

What happened: ServiceNow launched AI Passport on 15 October 2026, a cryptographically signed credential system that gives enterprise AI agents a verifiable identity, defined permissions, and a real-time kill switch, alongside shadow AI detection and agent-level cost tracking in its expanded Super Intelligence Control Tower.

Why it matters: Organisations are deploying AI agents without the governance frameworks to match: ServiceNow's own research found 100 per cent of banks use AI but only 24 per cent have governance in place, and that gap creates regulatory, security, and operational exposure that is growing as agent use scales.

David and Goliath view: The framework ServiceNow is enforcing at enterprise scale, every agent has an identity, a bounded scope, and an audit trail, is the right standard for any business, and the smallest version of it costs nothing to start.

Offer relevance:

• Secure AI Brain: AI Passport establishes the identity, permissioning, and audit infrastructure that a secure AI deployment requires
• Employee Amplification Systems: Shadow AI detection and cost tracking give operators the visibility needed to govern a real-world agent estate and ensure AI tools are genuinely amplifying rather than quietly accumulating risk