Great point. We think that’s one of the biggest missing layers in today’s agent ecosystems. An API key can prove a request was authorized, but it usually doesn’t answer which verified agent acted, under which owner’s authority, with which scoped permissions, and under which execution lease. That’s the gap we’re trying to address with Agent Passport plus short-lived, owner-approved scoped leases and auditable receipts. We don’t see Passport as replacing API authentication—it complements it with identity, accountability, and traceability for autonomous agents.