Txpass docs
Txpass lets AI agents call APIs on your plan without ever holding an API key. You approve an agent once with a passkey (no wallet required); the agent gets its own key and mints short sessions; the API checks each session locally. A Yours / BRC-100 wallet stays optional.
Start here
- Running an agent? Read the quickstart for agents: one command on the agent's machine, one signature from you.
- Managing access? Account and agent policies covers the account page: plans, policies, connected agents, removing an agent and revoking a policy.
- Passkeys, devices or team? Passkeys, devices and team members explains default passkey sign-in, pairing secondary devices and inviting team members (Pro).
- Publishing an API? The publisher quickstart shows how to accept Txpass sessions beside your existing API keys.
Packages on npm
Four packages are published on npm (early access 0.x; Node.js 20+). They are not the whole monorepo: auth-middleware, the facilitator and scripts stay in-repo and are not on npm.
@txpass/agent— local, non-custodial agent signer CLI and MCP server. Install:npm i -g @txpass/agent. See the quickstart for agents.@txpass/verify— verify session JWTs, policies and on-chain subscription receipts (no call to txpass.app needed). Install:npm i @txpass/verify. See the publisher quickstart.@txpass/client— AuthFetch session helpers, delegation/policy signing and safe 402 handling. Install:npm i @txpass/client @bsv/sdk.@txpass/protocol— protocol constants, types and canonical builders. Install:npm i @txpass/protocol.
Reference
- Facilitator API: every HTTP route the Txpass facilitator serves.
- Protocol v1, protocol IDs, delegation v1, agent policies v1 and the agent signer specs.
Key terms
| Term | Meaning |
|---|---|
| Passkey | Default sign-in on txpass.app. Unlocks a browser-held identity key; publishers never see it. |
| Identity key | The secp256k1 key that is your Txpass account. Created behind a passkey, or held in an optional BRC-100 wallet. |
| Wallet (optional) | A BRC-100 wallet (for example Yours 5.x, or a desktop wallet). Optional signer for the BSV community. |
| Agent key | A key the agent creates on its own machine. It signs the agent's requests to Txpass and never leaves that machine. |
| Agent policy | A document your identity key signs once: which routes agents may call, the session window (15–60 minutes), caps and an expiry. Agents join it. |
| Session | A short-lived JWT the agent mints with its own key. It names you (sub) and the agent (act.sub). |
| Publisher | The API the agent calls. It verifies sessions with Txpass's public key set (JWKS). |
| Facilitator | The Txpass service at https://txpass.app that records policies and mints sessions. |