Account and agent policies
Your Txpass account is your identity key, unlocked by a passkey by default. There is no password and no cookie: the account page at txpass.app/account asks your identity key to sign each request, and Txpass never sees the plaintext key.
Sign in
- Open /account.
- Create or unlock your Txpass ID with a passkey (Face ID, Touch ID, Windows Hello or a security key).
- Optional: connect Yours (5.x or later) or another BRC-100 wallet if you prefer that signer.
Your identity key is shown in the header (Copy key copies the full public key). For secondary devices, team members and Pro, see Passkeys, devices and team members.
Access: your plans
Access lists your plans for each API, such as the free ImprintAI plan, with their status (active, expired, revoked or not yet valid), how long they are valid and any quota. Your agents act on these plans: if you have no live plan for an API, your agents can't mint sessions for it.
Paid plans are billed by the publisher, the way you already pay them. When you link your Txpass identity with a publisher, the publisher asks Txpass to record your subscription on chain, and it appears here as a subscription receipt within a few seconds. Renewals, plan changes and cancellations show up the same way. If a receipt you were given isn't listed, the page also shows a form to register it.
Each receipt also shows its salt with a Copy salt button. Only you can see it. Give it, with the receipt and your identity key, to any other verifier to prove the receipt is yours without Txpass; see Portable verifier.
Agents
Connect an agent (recommended)
On the agent's machine, run txpass-agent connect imprintai-api. It prints a link and a short code. Open the link, check the code matches and approve with one signature (passkey or wallet), either into a new policy or an existing policy. See the quickstart for agents for the full walk-through.
Agent policies
An agent policy is a set of rules you sign once. Every agent in it gets its own sessions within these limits:
| Setting | What it means | Range and default |
|---|---|---|
| What agents may do | The API routes agents may call. Untick anything they don't need. | Routes the API publishes |
| Session window | How long each session an agent mints lasts. | 15–60 minutes |
| Policy lasts | When the policy expires. | Up to 1 year; default 90 days |
| Max agents | How many agents can be in the policy at once. | 1–50; default 5 |
| Sessions per agent per day | A cap on how often each agent can mint. | 1–10,000; default 200 |
| One-time codes | Whether agents may join with a code you generate. | On or off |
| New agents wait until I confirm them | Code-joined agents stay pending until you click Confirm. | Off by default |
A policy can't be changed after signing. To change it, sign a new one and revoke the old one.
Click New policy to create one by hand, Review the summary in plain words, then sign and save.
Adding agents
- Connect (above): the agent starts, you approve.
- Add agent with a code: generates a one-time code (single use, expires in 15 minutes) and the command to paste into the agent.
- Add agent by key: paste the agent's public key (from
txpass-agent pubkey) and sign.
When a new agent joins, a banner shows it with a one-click Remove (and Confirm if the policy requires confirmation).
Removing an agent or revoking a policy
- Remove an agent: it can't mint new sessions. Other agents in the policy keep working.
- Revoke policy: all of its agents stop getting sessions.
- Activity shows the policy's recent events, such as agents joining, codes used and agents removed.
How fast does it take effect? New sessions stop immediately. The Txpass agent checks with Txpass before every write, so a removed agent stops at once. A session that was already issued can still be accepted by an API that checks tokens locally until it expires, which is at most the policy's session window.
Advanced: one-off delegation
Advanced: one-off delegation signs a delegation for one specific agent key, without a policy. You get a delegation id and a command to run on the agent's machine (txpass-agent delegation fetch --issuer …). Use Stop agent to revoke it. Policies are usually easier: one signature covers many agents, and each can be removed on its own.
Privacy and safety
- The page loads no third-party scripts and sets no cookies.
- Every change is signed by your identity key; the page shows a plain-words review before each signature.
- Agents never receive your identity key. Each agent uses its own key, created on its own machine.
- Only you can see your policies and their activity.