Anonymous agents
are ungovernable.
Every agent in your organization needs a verified identity before it takes a single action. Nomotic issues cryptographic birth certificates — signed, bound to governance policy, and traceable to a human owner. Authority is issued, never assumed.
Every agent gets
a birth certificate.
A cryptographically signed document issued at agent creation — before any action is authorized. The certificate binds the agent's identity to its governance configuration. If the configuration changes, the hash changes. Tampering is detectable.
- ✓ Ed25519 signed by your organization's governance key
- ✓ Governance hash binding — certificate tied to config
- ✓ Archetype assignment at issuance
- ✓ Scope and zone declaration
- ✓ Human owner accountability mapping
- ✓ Full lifecycle: active → suspended → revoked
Complete agent identity
infrastructure.
From issuance through the full agent lifecycle. Every identity capability your organization needs to manage a real AI workforce.
Birth Certificates
Cryptographic identity issued at agent creation. Ed25519 signed, governance hash bound, traceable to a human owner. One command to provision.
All TiersCertificate Authority
Hosted CA at ca.nomotic.ai. Free identity certificates, unlimited issuance. Self-hosted CA option for enterprises requiring on-premise infrastructure.
EnterpriseTiered Identity
Three certificate tiers: Identity (known), Governed (behavioral binding), Verified (audited). Each tier earns more trust and access within the platform.
All TiersTransparency Log
All issued certificates published to a public transparency log. Organizations can monitor for unauthorized agent registrations in their namespace.
EnterpriseGovernance Hash Binding
The certificate is cryptographically bound to the agent's governance configuration. Any config change updates the hash — creating an auditable linkage.
All TiersShadow Agent Detection
Detect ungoverned agents operating in your environment. One-click promotion from shadow to identified to governed. No agent goes unaccounted.
EnterpriseOne command to provision
a verified agent.
Identity provisioning takes seconds. The certificate travels with every governance evaluation, and the CLI gives you full lifecycle control.
$ nomotic birth --name claims-processor --archetype healthcare-agent --org acme-corp
✓ Certificate issued: NMC-8C4F2A1E
✓ Signed with org key: acme-corp-governance.pub
✓ Governance hash bound: sha256:a4f2c...
# Inspect the certificate
$ nomotic inspect claims-processor
# Verify signature and governance hash
$ nomotic verify NMC-8C4F2A1E
✓ Signature valid · Governance hash matches · Status: ACTIVE
# Python SDK
from nomotic import GovernanceRuntime
runtime = GovernanceRuntime()
cert = runtime.birth(
agent_id="claims-processor",
owner="[email protected]",
archetype="healthcare-agent",
scope={"read", "query", "write"},
)
print(cert.certificate_id) # NMC-8C4F2A1E
Identity features
across tiers.
| Feature | Community | Team | Enterprise |
|---|---|---|---|
| Agent birth certificates | ✓ | ✓ | ✓ |
| Ed25519 signing | ✓ | ✓ | ✓ |
| Governance hash binding | ✓ | ✓ | ✓ |
| Lifecycle management (suspend/revoke/renew) | ✓ | ✓ | ✓ |
| Cloud certificate sync | — | ✓ | ✓ |
| Hosted CA (ca.nomotic.ai) | — | ✓ | ✓ |
| Tiered identity (Identity / Governed / Verified) | — | ~ | ✓ |
| Transparency log | — | — | ✓ |
| Shadow agent detection | — | — | ✓ |
| Self-hosted CA | — | — | ✓ |
Give your agents
an identity.
Birth certificates are free for all tiers. Start issuing in under five minutes.