ServiceNow Gives Every AI Agent a Signed Passport: a Demo Where an $18 Refund Passes and a $40 Request Gets Blocked

ServiceNow announced AI Passport on October 15, a cryptographically signed credential that spells out what an AI agent is allowed to do inside a company: who it acts for, which actions it may take, which systems it can touch and which human owns it. The credential is issued through the company's AI governance platform — renamed from AI Control Tower to Super Intelligence Control Tower — and is verified while the agent works, not in an after-the-fact audit.

The demo made the concept concrete. ServiceNow configured a third-party customer service agent to process refunds below $25 with its unrelated capabilities disabled. An $18 refund went through automatically. A $40 request was rejected at runtime because it crossed the line set for human review.

Enforcement is graduated rather than binary. Companies can monitor an agent, pause it by revoking session tokens, restrict it to approved tools and endpoints, or deactivate it by revoking its credentials and restore it later with a logged reason. "It's more like a dimmer switch," said Nenshad Bardoliwalla, ServiceNow's senior vice president of AI product management, who argued that without a verifiable baseline "every guardrail is just advisory."

NVIDIA is the design and launch partner. AI Passport links into NVIDIA's Open Agent Safety Platform, including its OpenShell secure runtime and Sentry security framework, so enterprise policy can be enforced inside the infrastructure where agents actually run. ServiceNow says the credential uses open specifications, so other governance products and identity providers can issue and verify the same passports — including for third-party agents ServiceNow does not build.

The passport arrives with a wider governance bundle. The control tower is gaining shadow AI detection to find unapproved tools, more than 400 vendor connectors for discovery and behavior monitoring, and an AI Cost Management product that tracks spending on frontier models, hyperscalers and data center GPUs by user and department. An Operational Resilience package for financial institutions is available now; AI Passport, shadow AI detection and cost management are due later this quarter.

On the employee side, ServiceNow showed the third generation of EmployeeWorks, where staff can build no-code assistants for research, calendaring and HR work inside the same guardrails, plus Productivity Routines that run repeat tasks in the background. Developers get ToolSmith, which assembles tools and integrations from natural-language instructions and was trained on more than 75,000 APIs, along with a Conversations API for embedding the capabilities in internal apps and kiosks. Both are in controlled availability.

Investors read the announcement as evidence that ServiceNow owns the governance layer of the agent era: the stock rose more than 6% on October 15 to its highest level since August, and NTT Data said it is beginning to adopt EmployeeWorks to rein in shadow IT. The bet is that enterprises will pay for enforcement, not just capability — and that in a market full of agents, the scarce product is a throttle with an audit log attached.