ServiceNow (NYSE: NOW) announced a new AI Passport solution and expanded AI governance capabilities designed to give enterprises runtime control over AI agents operating in multi-agent workflows.

AI Passport is a cryptographically signed credential that verifies what AI agents and Model Context Protocol (MCP) servers are authorized to do at each step of a workflow. The credential is grounded in enterprise business context, drawing on ServiceNow's Configuration Management Database, Governance, Risk, and Compliance policies, and workflow approvals. When an AI agent operates outside its authorized scope, the system can redirect, restrict, or terminate it, including kill switch capabilities.

ServiceNow named Nvidia as a design and launch partner for AI Passport, building an enforcement implementation using the Nvidia Open Agent Safety Platform, which includes Nvidia OpenShell open-source secure runtime software and the Nvidia Sentry security framework.

Alongside AI Passport, ServiceNow announced expanded governance features including shadow AI detection to identify unapproved agents on a network, more than 400 out-of-box connectors for AI discovery, access mapping, and continuous AI observability. The company also announced cost governance tools, value intelligence capabilities, and AI Cost Management as part of IT Asset Management, which will consolidate spending on frontier models, embedded SaaS AI, hyperscaler services, and data center GPUs into a single view.

A new Operational Resilience solution aimed at financial institutions is available now, while AI Passport, shadow AI detection, and AI Cost Management are expected to be available in the fourth quarter of 2026.

According to ServiceNow's 2026 Banking AI Maturity Index, cited in the press release, 100% of banks report using AI, but only 24% have governance capabilities to match that usage.

LTM Limited, a customer, said it has deployed 1,500 AI agents across its organization and uses ServiceNow's platform as a system of record for AI agent inventory, risk, and compliance.