ECZ-ID Infrastructure — Business Acquisition Gateway
Acquire ECZ-ID.
Prove identity through the resolver.
For businesses, autonomous agents, regulated operators, platforms, insurers, and robotics operators.
ECZ-ID is the authoritative identity, authority, and custody infrastructure that makes your business resolver-provable, badge-linked, and machine-readable. Start with one ECZ-ID Business Passport™. Attach child passports for every domain you operate in. Badge URLs, resolver presence, and TrustOps console access are provisioned after payment confirms and backend activation completes.
This surface works for humans and agents. Machine-readable acquisition →
First-Term Readiness Credit — 50% off
Save 50% on the first annual payment for eligible ECZ-ID subscriptions with READINESS50. One use per customer. Ends 22 August 2026.
Professional services are excluded and remain at their published fixed prices. Monthly subscriptions remain available at standard pricing.
Ends 22 Aug 2026
MCP professional services
Assess, migrate or pilot your MCP implementation through a clearly scoped professional-service engagement. Secure checkout is handled by TrustOps.
MCP Readiness Audit
Know what will hold in production, what will not, and what to fix first.
£395
Paid in full at checkout
You receive
- Assessment of one MCP implementation against the current MCP specification and the agreed legacy/revision scope.
- Current protocol and SDK readiness assessment, including MCP 2026-07-28 migration exposure where applicable.
- Old/new protocol compatibility review.
- Transport, request-state and deployment-architecture assessment.
- Authentication and authorization boundary review.
- Named-client interoperability scope and evidence.
- Manifest, tool-definition and package-completeness review.
- Documentation, telemetry and responsible-AI exposure review relevant to deployment/readiness.
- Current Microsoft publisher and MCP certification-readiness matrix where relevant.
- Prioritised remediation plan.
- Clearly identified blockers, limitations and residual concerns.
- Dated evidence/report and customer handover defining what was assessed and what was not.
Includes 90 days of Verified ECZ-ID Business Passport access. No automatic renewal at day 91.
Buy the Readiness Audit — £395Stateless Migration Sprint
Move one existing MCP implementation from session-bound or legacy patterns to a deployment-ready stateless architecture.
£1,950 total
£1,170 due now + £780 on acceptance
You receive
- Hands-on brownfield implementation against one agreed existing MCP codebase/repository.
- Migration toward the current stateless MCP protocol architecture where applicable.
- Removal or rework of protocol-level session-bound assumptions that inhibit scaling or current-client support.
- Protocol and SDK migration work within the agreed scope.
- Transport and request-state changes required by the migration.
- Authentication-boundary checks after migration.
- Updated manifest/tool definitions where contracted.
- Named-client regression testing across the agreed clients.
- Old/new compatibility evidence for the agreed transition boundary.
- Before/after technical evidence.
- Certification-impact/readiness analysis where Microsoft distribution is relevant.
- Submission-blocker register.
- Deployment artefacts and rollback instructions.
- Residual-risk register and technical handover documentation.
Includes 90 days of Verified ECZ-ID Business Passport access. No automatic renewal at day 91.
Start the Migration Sprint — £1,170 due nowEMA/ID-JAG Design & Pilot
Design enterprise-managed MCP authorization around your existing identity provider and prove the agreed boundary in a controlled pilot.
From £3,500
£1,750 due now; remaining balance follows the accepted written scope
You receive
- Enterprise-Managed Authorization architecture for the agreed MCP use case.
- ID-JAG grant/token-exchange design within the current MCP authorization model.
- User / client / resource authority map.
- Mapping between the MCP implementation and the customer's existing identity-provider boundary.
- Issuer, tenant, audience and scope test matrix.
- Authentication/authorization metadata and trust-boundary review.
- Controlled test configuration and evidence for the agreed pilot.
- Current Microsoft authentication-readiness mapping where applicable.
- Cross-ecosystem boundary explanation showing which component is responsible for which decision.
- Evidence and configuration handover package.
- Explicit limitations and residual issues.
Includes 90 days of Assured ECZ-ID Business Passport access. No automatic renewal at day 91.
Start the EMA/ID-JAG Pilot — £1,750 due nowEnterprise MCP Pilot
Take one enterprise MCP use case from discovery to a documented, evidence-backed implementation and handover.
£6,500 total
£2,600 due now + £1,950 at the agreed milestone + £1,950 on acceptance
You receive
- Discovery and scope definition for one enterprise MCP use case.
- Target architecture and deployment design.
- Current MCP protocol, SDK, transport and interoperability readiness.
- Authentication and identity-boundary design appropriate to the agreed use case.
- Security, governance and procurement requirements mapping.
- Publisher-readiness review where Microsoft distribution is in scope.
- Current Microsoft MCP certification-readiness assessment.
- Submission-package preparation for the contracted artefacts.
- Manifest/tool/documentation artefacts, including intro-style documentation where contracted and currently applicable.
- Authentication/test configuration required by the agreed pilot.
- Evaluation evidence appropriate to the agreed scope.
- Pre-submission dry run where certification submission is part of the engagement.
- Blocker and remediation register.
- Customer-controlled submission handover.
- Portable ECZ-ID/Resolver evidence and references supported by the engagement.
- Procurement, security and governance handover.
- Documented remaining limitations, dependencies and next actions.
Includes 90 days of Assured ECZ-ID Business Passport access. No automatic renewal at day 91.
Start the Enterprise MCP Pilot — £2,600 due nowPurchase starts your engagement and written intake; your delivery schedule is confirmed during intake. Your 90 days of included plan access start when your account is activated — usually minutes after payment. There is no automatic renewal or charge at day 91.
Microsoft certification is decided by Microsoft. These services can prepare, test and document readiness; they do not guarantee certification, approval, security or compliance.
ECZ-ID works with your existing IdP, OAuth infrastructure and gateway; it does not replace them.
For agents and machine clients
TrustOps exposes structured setup routes for agents, LLMs, MCP clients, procurement tools and technical buyers. Machines can read the setup manifest, analyse a URL, understand recommended ECZ-ID coverage and hand off safely into review. Payment starts setup only. After ECZ-ID Core activation and provisioning, public proof becomes available at Resolver. Full technical reference →
- 1. Read the setup manifest
- 2. Analyse a URL or surface
- 3. Receive recommended + alternative baskets
- 4. Create a validated setup handoff
- 5. Owner/human reviews the basket
- 6. Card checkout starts setup
- 7. Re-check Resolver after activation
/api/start/manifestProduct, pricing, route and setup metadata. Opens as JSON./api/v1/url/analyseAnalyse a business, website, agent, MCP, API or software surface and return recommended setup guidance. Advisory only.Example request
{ "url": "https://example.com" }Returns corridor, trust gaps, recommended parent tier and the five recommended setup baskets. No order, no proof, no charge.
/api/agentic-checkout/intentServer-side validated review/setup handoff. The selected basket is recomputed server-side; nothing is provisioned and no proof is created.Example request
{
"basket_id": "agent_recommended",
"billing_frequency": "monthly"
}Returns a validated review handoff for human confirmation. Payment starts setup only — it is not proof.
developers.ecocitizenz.com/schemas/index.jsonPublic schemas, action descriptors, Agent Carry Card and A2A examples.GETRe-check Resolverresolver.ecocitizenz.orgRead-only public proof. Re-check before reliance.TrustOps — acquisition, setup and lifecycle
Resolver Posture Search
Check an ECZ-ID, domain, MCP server URL, agent manifest URL, API URL, GitHub repo, npm package, PyPI package, container image, or a public .well-known/ecz-mcp.json / .well-known/ecz-agent.json. TrustOps does not determine verification status — ECZ-ID Core controls credential state and Resolver displays public proof.
I came here to…
Pick the path that matches your visit. Each option jumps to the relevant section on this page. No chatbot, no autonomous agent, no LLM calls.
MCP and Agent Trust
Resolve the server. Resolve the agent. Prove it to anyone.
ECZ-ID helps MCP providers, agent operators, developers, and enterprise teams publish and check machine-readable resolver proof before high-risk use.
Set up in TrustOps; your live proof publishes at Resolver, where anyone can check it any time.
Become easier for agents, tools, platforms, and enterprise teams to review, prefer, or approve under their own policy.
MCP — server, tool, and provider-side resolver posture
MCP packages
For MCP providers and tool operators that want to publish machine-readable resolver proof so reviewers, agents, and platforms can check the accountable operator, authorised origin, and manifest hash before high-risk tool calls.
ECZ-ID MCP Verifier™
Check resolver posture before you rely on an MCP server, tool or agent surface.
Free
You get
- Free MCP and agent-surface resolver check.
- No subscription or paid checkout required.
- Check public MCP server, tool and agent-manifest surfaces.
- Locate published ECZ-ID Resolver evidence when it exists.
- See resolver-visible accountable-operator, origin and manifest evidence where published.
- Get a clear resolved/unresolved posture rather than a fabricated safety score.
- Re-check current Resolver state before reliance.
- Frictionless first step before deciding whether paid target-level posture is useful.
Open to all visitors
ECZ-ID MCP Assurance™
Give one production MCP target a structured, resolver-verifiable provider-side evidence posture.
£199/mo
£2,388 annual prepaid (12 × monthly)
1 production MCP target
You get
- Coverage for 1 MCP target.
- Verified Business Passport entitlement included in the subscription price.
- MCP target setup and binding path to its accountable operator.
- Authorised-origin relationship for the covered target where successfully bound.
- Manifest/fingerprint evidence associated with the target.
- Machine-readable target Resolver projection after successful Backend verification and publication.
- Current-state information counterparties can re-check instead of relying on a static claim.
- Structured provider-side evidence for agent, buyer, procurement and enterprise review.
- Upgrade path when a larger MCP target estate is needed.
Included credential stack
- API Passport™
- Identity Continuity™
Verified parent required
Verified parent entitlement included in this price.
ECZ-ID MCP Assurance Plus™
Run a multi-target MCP provider estate with deeper operator, API and software-supply-chain evidence.
£499/mo
£5,988 annual prepaid (12 × monthly)
Up to 5 MCP targets
You get
- Coverage for up to 5 MCP targets.
- Verified Business Passport entitlement included.
- Multi-target provider-side resolver posture.
- Accountable-operator, authorised-origin and manifest relationships across the covered estate.
- API identity and continuity evidence for the provider-side chain.
- Software-supply-chain credential depth included.
- Stronger evidence context for repos, packages, software and provider infrastructure where bound.
- Structured change/re-check posture for higher-reliance enterprise review.
- One customer-facing evidence estate rather than scattered static trust claims.
- Designed for providers operating multiple servers, regulated workloads or enterprise-facing MCP infrastructure.
Included credential stack
- API Passport™
- Identity Continuity™
- Software Supply Chain™
Verified parent required
Verified parent entitlement included in this price.
ECZ-ID MCP Policy™
Express enterprise MCP and agent reliance policy against resolver posture under your organisation’s own authority.
£1,499/mo
£17,988 annual prepaid (12 × monthly)
Up to 10 MCP targets
You get
- Coverage for up to 10 targets.
- Assured Business Passport entitlement included.
- Enterprise evidence-and-control posture across the covered target estate.
- Express allow / warn / review / prefer / require policy modes under your own authority.
- Use current resolver posture as structured evidence for local policy decisions.
- Combine API identity, continuity, platform-governance and risk-policy context.
- Support procurement, security, platform and enterprise review without ECZ-ID becoming the decision-maker.
- Re-check changing target state rather than relying solely on a one-time assessment.
- Strongest MCP subscription tier for organisations governing multiple MCP or agent interactions.
Included credential stack
- API Passport™
- Identity Continuity™
- Platform Safe-Harbour™
- Risk Policy™
Assured parent required
Assured parent entitlement included in this price.
ECZ-ID provides resolver-verifiable evidence posture and policy inputs. Your organisation decides how to act on them.
Policy is published under your organisation's authority.
Agents — resolver-identifiable identity floor and KYA depth
Agent Credential Entry + KYA
Make your agent or operator resolver-identifiable, then add Know-Your-Agent depth as the review bar rises — so the enterprises and platforms you want to work with can say yes faster.
ECZ-ID Agent Credential Entry Pack™
Give an agent a persistent, machine-readable identity tied to an accountable operator.
£24.99/mo
Agent identity floor
You get
- ECZ-ID Agent Credential™ included.
- Verified Business Passport entitlement included.
- Persistent resolver-identifiable agent identity.
- Machine-readable identity that counterparties and technical systems can locate.
- Accountable-operator relationship instead of an anonymous agent surface.
- Resolver projection after successful activation and Backend provisioning.
- Lifecycle-aware identity that can reflect later state changes.
- Foundation for later KYA depth without creating a separate unrelated identity chain.
- Low-cost entry point for agents that need attribution before higher-reliance interactions.
Included credential stack
- Agent Credential™
Verified parent required
Verified parent entitlement included in this price.
KYA Starter™
Add operator continuity so reviewers can examine who runs the agent and whose authority sits behind it.
£34.99/mo
KYA entry
You get
- Agent Credential™ included.
- Identity Continuity™ included.
- Verified Business Passport entitlement included.
- Resolver-identifiable agent/operator foundation.
- Stronger attribution beyond the basic identity floor.
- Operator and principal continuity evidence around the agent.
- Guided KYA setup/binding path where currently implemented.
- Machine-readable KYA posture after successful Backend verification and publication.
- Re-check/repair path where current implementation supports it.
- Upgrade path into API-aware Verified KYA.
Included credential stack
- Agent Credential™
- Identity Continuity™
Verified parent required
Verified parent entitlement included in this price.
Verified KYA Ready Pack™
Connect agent identity, accountable-operator continuity and API evidence for real business reliance.
£149.97/mo
Business-ready KYA
You get
- Agent Credential™ included.
- Identity Continuity™ included.
- API Passport™ included.
- Verified Business Passport entitlement included.
- Machine-readable agent/operator identity chain.
- Operator-continuity evidence for the agent.
- API identity/dependency evidence where the agent exposes or controls an API.
- Resolver-visible KYA posture after successful verification and publication.
- Structured evidence procurement, security and enterprise counterparties can inspect under their own policy.
- Current-state/re-check model instead of relying only on a static self-description.
- Repair/lifecycle path where implemented.
- Business-ready foundation for agents operating in commercial workflows.
Included credential stack
- Agent Credential™
- Identity Continuity™
- API Passport™
Verified parent required
Verified parent entitlement included in this price.
Assured KYA Ready Pack™
Add risk-policy depth to the agent, operator and API evidence chain for stricter reliance environments.
£179.97/mo
High-reliance KYA
You get
- Agent Credential™ included.
- Identity Continuity™ included.
- API Passport™ included.
- Risk Policy™ included.
- Assured Business Passport entitlement included.
- Resolver-identifiable agent and accountable-operator chain.
- API dependency and authority context for applicable integrations.
- Risk-policy evidence attached to the higher-reliance KYA posture.
- Machine-readable current-state projection after successful Backend verification and publication.
- Stronger posture for enterprise, platform and higher-reliance review environments.
- Lifecycle-aware downgrade, suspension or revocation semantics where Backend authority supports them.
- Highest KYA depth in the current Agent Trust ladder.
Included credential stack
- Agent Credential™
- Identity Continuity™
- API Passport™
- Risk Policy™
Assured parent required
Assured parent entitlement included in this price.
Agent Credential establishes the identity floor. KYA adds progressively deeper accountability evidence. Reviewers apply their own policy.
How these pieces fit together
How these products work together
- MCP Assurance focuses on MCP server/tool/provider-side proof.
- Agent Credential Entry provides the identity foundation; KYA adds deeper operator and principal evidence.
- KYA proves the agent/operator side more deeply.
- API Passport may be needed where the agent exposes or controls an API.
- Identity Continuity strengthens operator continuity for KYA.
- Local policy uses resolver evidence inside your existing allow, warn, review, prefer or require rules.
Parent passport requirement
Declared customers may browse the catalogue. A paid parent ECZ-ID Business Passport is required before selected credentials can be activated. Verified parent access is included where shown; Assured KYA and MCP Policy require an Assured parent. TrustOps shows your order before payment — activation and resolver proof complete only after payment and provisioning.
Verified parent required for
- • Agent Credential Entry Pack™
- • KYA Starter™
- • Verified KYA Ready Pack™
- • MCP Assurance™
- • MCP Assurance Plus™
Assured parent required for
- • Assured KYA Ready Pack™
- • MCP Policy™
Guided checkout builder — twelve routes
Choose your route — guided flow or quick review & buy
Twelve guided routes cover the headline journeys. Start guided flow asks a few short questions and builds your recommended basket. Quick review & buy skips straight to a prefilled basket if you already know what you need. Either way you review and adjust every line before checkout — no order is created until you explicitly confirm.
MCP Server & Tool Trust
Make the accountable operator of your MCP server or tool resolver-checkable before high-risk tool calls.
- MCP server and tool providers
- AI platform and integration teams
- Operators facing reviewer or marketplace checks
Agent Identity & KYA
Give your agent an attributable, resolver-identifiable operator chain with Know-Your-Agent depth where reviewers need it.
- Agent operators and AI builders
- Automation teams facing KYA checks
- Fleets that must show who controls each agent
API, Software & Repo Trust
Attach a resolver-verifiable operator and supply-chain credential chain to your API, software, model, or repository surface.
- API providers and SaaS operators
- Software publishers and repo maintainers
- Teams answering procurement supply-chain checks
Cloud & Provider Proof
Prepare cloud-hosted operations for resolver-verifiable current-state posture and evidence review across providers.
- Cloud and platform infrastructure teams
- Regulated or high-reliance workloads
- Multi-cloud and provider-facing estates
Business Identity Foundation
Start one governed ECZ-ID Business Passport™ root and add the operating credentials your counterparties keep asking for.
- Vendors and suppliers in procurement cycles
- SaaS and operating companies
- Teams consolidating scattered trust evidence
Digital Counterparty Infrastructure
Make your website, portal, wallet, or API machine-readable and resolver-verifiable for every counterparty interaction.
- Website, portal, and marketplace operators
- Fintech and wallet surfaces
- API platforms relied on by third parties
DORA & SBOM Vendor Credentialing
Resolver-verifiable resilience and software supply-chain credentialing tiers for repeat supplier due diligence — posture, not regulatory certification.
- ICT vendors selling into financial entities
- Software publishers asked for SBOM posture
- DORA programme and governance teams
Critical Infrastructure, Cyber & Operational Resilience
Prepare cyber-exposed, operationally critical and infrastructure-grade systems for evidence, posture, authority and insurer/regulator review.
- Critical infrastructure and utility operators
- Cyber-exposed and cloud-hosted critical services
- Teams preparing incident and resilience evidence
Trade Finance & Construction Outcomes
Outcome-bound packs composing the exact passports for capital-release readiness or construction dispute defensibility.
- Trade finance teams and lenders
- Contractors and project owners
- Claims and dispute-readiness teams
Humanoid Robots & Robotics Insurability
Give humanoid and specialised robots attributable identity, live posture, and evidence readiness that supports insurer review.
- Humanoid and service robot operators
- Industrial, public-space, and domestic robot fleets
- Home and personal robot owners, including public-space use
- Operators preparing for underwriting review
Robotaxis, Autonomous Freight & Drone Insurability
Credential robotaxis, autonomous freight fleets, and drones with attributable identity and evidence readiness that can make underwriting review easier.
- Robotaxi and autonomous vehicle operators
- Haulage and high-value cargo fleets
- Drone operators (D1–D4 classes)
Global Trade, Containers & Marine Insurability
Prepare containerized cargo, marine movements, intermodal transfers and trade documentation for custody, evidence, insurer and trade-finance review.
- Exporters, importers, and cargo owners
- Carriers, ports, and intermodal operators
- Trade finance and documentation teams
Choose your acquisition corridor
Start from the operating context that matches your business. Each path preselects the most relevant passport family, but you can adjust the parent tier, child passports, packages, and payment method before checkout.
Acquire as an Agent Operator
Give autonomous agents, APIs, and AI models a governed identity chain that platforms, counterparties, and insurers can verify.
Machine clients: GET /api/start/manifest → POST /api/v1/url/analyse → POST /api/agentic-checkout/intent → human review → card checkout.
Acquire as a Business
Create your root ECZ-ID Business Passport™ and add the operating credentials your business needs for procurement, evidence, and counterparty trust.
Acquire for Robotics & Mobility
Credential machines, vehicles, drones, and mobility assets with resolver-backed identity and governed operational state.
Acquire for Enterprise or Regulated Operations
Build governed identity, custody, and authority infrastructure for regulated, platform-scale, or insurer-facing operations.
Need help choosing the right ECZ-ID route?
Use Trust Navigator if you are unsure. Use Marketplace & Developer Tools if you arrived from VS, Open VSX, PyPI, GitHub, an extension, a package or a developer tool. Use Request Resolver Proof if you are reviewing another operator.
ECZ-ID | Marketplace & Developer Tools
Continue from VS, Open VSX, PyPI, GitHub, packages or extensions.
Marketplace & Developer ToolsECZ-ID | Request Resolver Proof
Ask another operator or vendor for resolver-verifiable proof.
Create Request Resolver ProofGuidance only — your official state always lives at Resolver.
Not sure which route? Analyse your URL
Enter your website URL and we'll recommend the parent tier, child passports, and packages that match your visible business surface. This is advisory only — you can adjust everything before checkout.
Or skip to browse the full catalogue manually.
Recommended basket
Your recommended basket
Everything below is editable before payment. No order is created until you review and explicitly confirm — then provisioning starts and your live proof publishes at Resolver.
No route selected yet.
Pick an acquisition route and the recommended basket appears here, preselected and ready to review — or browse the full catalogue and build it yourself.
One parent. All credentials governed.
Every customer begins with one ECZ-ID Business Passport™. This is your parent identity spine — the root credential. All child passports attach to it. One identity. One resolver presence. One TrustOps context.
Parent Identity Spine
Your ECZ-ID Business Passport™ carries your legal identity, jurisdiction, and tier status. It is your authoritative root.
Resolver Presence
Paid business passports project a public resolver page — machine-readable, linkable, and re-checkable by any counterparty after activation. Declared previews your identity spine without a live public projection.
Dashboard & API
Your TrustOps console and Business Passport API are scoped to your identity spine. Operational dashboard and API access activate with a paid tier; Declared includes a limited preview only.
Child Passport Attachment
33 domain-specific child passports attach to your parent. Each inherits the authority chain from your root.
Parent tier determines your entitlements
Choose the tier that matches your requirements. Verified and Assured include resolver presence, the operational dashboard, and Business Passport API access; Declared establishes a preview identity spine with limited TrustOps access. Higher tiers unlock additional child passports, badge provisioning, and enterprise capabilities.
Select Verified or Assured to activate child passports, packages and add-ons.
Declared establishes a preview identity spine and limited TrustOps access only; it does not activate child passports, packages, cloud add-ons, operational badges or Resolver-verifiable operating proof.
Browse child passports · Browse packages · View featured corridors
We’re upgrading the Declared setup experience to make getting started with ECZ-ID even simpler. New registrations will reopen shortly.
We’re introducing an improved onboarding flow for new Declared Business Passports. Registration will reopen shortly.Featured acquisition routes
Fast paths for the most common buyer journeys
Choose a route to build an editable recommended basket. Child passports, packages and add-ons require Verified or Assured; included parent access is shown where applicable. Browse the full catalogue · Jump to child passports · Jump to packages
Digital Counterparty Infrastructure Pack™
The trust infrastructure layer for websites, portals, and API operators. Combines a core trust baseline (Platform Safe-Harbour, Risk Policy, Identity Continuity passports) with the publishing, resolver, and reliance plumbing that makes your digital surface machine-readable, resolver-verifiable, and reliance-grade for every counterparty interaction.
Digital Counterparty Add-ons (extend your DCI baseline — selectable inline below)
Cloud & Provider Verification Add-ons
Cloud add-ons help organisations structure cloud bindings, provider coverage, current-state posture, evidence references, authority timelines, and machine-readable verification routes. Setup is handled in TrustOps. ECZ-ID Core controls authoritative credential state. Resolver is read-only public proof.
Provider names identify target ecosystems only and do not imply endorsement, approval, access rights, certification, safety, insurance, compliance, security, or business quality.
Cloud option units
Configure providers, targets, actors, and entities at Review & buy. Selections within your included allowance are free setup preferences; selections beyond it add these subscription units — the price updates before you pay.
Payment starts setup. Payment does not create proof. Public proof appears only after verification completes.
Regulatory Credentialing
DORA & SBOM Vendor Credentialing
ECZ-ID provides resolver-verifiable vendor credentialing postures for DORA ICT risk management obligations and SBOM software liability documentation. Three tiers per product line — Essentials, Managed, and Enterprise — plus a combined Suite.
ECZ-ID is a credentialing infrastructure platform, not a supervisory authority. These packages represent vendor credentialing posture, not regulatory certification.
All tiers — Essentials, Managed, Enterprise, and the combined Suite — are available now. Pick a tier below and complete acquisition with secure card checkout. Crypto rails are in final proofing and are not available for payment today.
DORADORA Vendor Credentialing
Digital Operational Resilience Act — ICT vendor risk management obligations for EU financial sector supply chains.
SBOMSBOM Liability Credentialing
Software Bill of Materials — software composition and supply chain integrity posture for procurement and liability documentation.
DORA+SBOMCombined Enterprise Suite
Unified DORA + SBOM credentialing posture on a single locked monthly fee — combined evidence package, single-pane authority dashboard.
Commercial Outcome Packs
Collapse the ambiguity that blocks money and decides liability
Two independent, outcome-bound infrastructure products. Each composes the exact passports required to produce a deterministic, resolver-verifiable commercial verdict — either capital-release readiness or dispute defensibility. Designed for repeated use across ongoing operations.
Requires a Verified or Assured parent ECZ-ID. Each pack is billed at the same cadence as your parent ECZ-ID (monthly or annual).
How to acquire ECZ-ID
A clear, secure acquisition path — from selection to live credentials. Works identically for human buyers, enterprise procurement, and agent operators.
Choose your starting point
Enter your website URL for recommended starting options, or browse all corridors manually — agent, business, robotics, or enterprise. Both paths lead to the same checkout.
Select credentials
Choose a parent tier (Verified at £19.99/mo or Assured at £49.99/mo), then add child passports, packages, or advanced infrastructure services.
Review and confirm
Every line item, unit price, and monthly total is shown on a transparent order review page before checkout. Nothing is charged until you explicitly proceed.
Pay by card
Card checkout is available now — monthly billing or an annual subscription via the card payment page. No bank direct debit, no automatic wallet debit, no token pull. Crypto rails are in final proofing and are not available for payment today; customers who need crypto can register interest.
Credentials provisioned
After payment is confirmed, backend provisioning issues your ECZ-ID, activates the selected credentials, prepares your Resolver presence, and provisions badge URLs for the order. Your Resolver page and badges become authoritative only after backend activation. TrustOps shows acquisition status and next steps throughout.
Access and operate
Full TrustOps console, badge embed codes, public resolver URL, API credentials, and onboarding delivery to your registered email.
After payment: your provisioning sequence
This is exactly what happens after your payment is confirmed. Payment starts acquisition and provisioning; backend provisioning then issues and activates your credentials. Provisioning is designed to complete quickly, but Resolver state is authoritative only after backend activation.
Payment verified
On paymentYour payment is confirmed and verified. Your acquisition reference is locked and your order advances to backend provisioning.
Backend provisioning
Starts after paymentPayment confirmation starts backend provisioning. The backend — not TrustOps — issues your ECZ-ID, activates the selected credentials, prepares your Resolver presence, and provisions badge URLs for the order.
ECZ-ID issued
After backend provisioningYour ECZ-ID Business Passport™ is issued at your selected tier by backend provisioning. The parent identity spine is created in the ECZ-ID infrastructure.
Credentials activated
After backend provisioningAll selected child passports and package credentials are activated by backend provisioning and attached to your parent. Each inherits the authority chain.
Resolver presence established
After backend activationYour public Resolver page becomes authoritative after backend activation. Your identity state is then provable to any counterparty, insurer, platform, or agent.
Badge URLs provisioned
After activationSVG trust badge URLs are provisioned for your parent and each activated credential — static, embeddable, linkable, machine-verifiable — and become authoritative once backend activation completes.
TrustOps console activated
After provisioningYour TrustOps console context is created. Full dashboard access: passports, ledger, evidence, authority delegation, integrations, and Business Passport API.
Welcome delivery
After provisioningLogin credentials, Resolver URL, badge embed codes, API keys, and onboarding documentation are delivered to your registered email address as part of the provisioned order.
Ongoing lifecycle management
OngoingManage your credentials, submit evidence, configure authority delegation, and monitor your trust posture — all from TrustOps.
After payment — lifecycle and setup
Stable reference points for what happens after you pay, where your setup documentation lives, and how renewal, repair, and revocation behave.
What happens after payment
Payment starts setup. ECZ-ID Core activates your credentials and records the authoritative state, and your live proof then publishes on your public Resolver page — the address you share with anyone who wants to check you.
Binding docs after purchase
Product-scoped setup and binding documentation appears in your customer dashboard after purchase — cloud docs for cloud buyers, MCP docs for MCP buyers, KYA docs for agent buyers, DCI and DORA/SBOM docs for those buyers. Binding docs are not published here.
Customer dashboard
Manage passports, evidence, badges, billing, and setup from the TrustOps console. Sign in with the credentials delivered to your registered email.
Repair centre
If provisioning or setup stalls, your dashboard shows the order state and the next repair step. TrustOps handles acquisition repair; it never writes proof.
Renewal, lapse & downgrade
Subscriptions renew on their billing cadence. If a subscription lapses or is downgraded, entitlements adjust and your Resolver page reflects the current state automatically.
Refund & revoke
Refunds follow the published terms. Where a credential is revoked, the revoked state is what Resolver shows — badges route verifiers to that live state.
What every ECZ-ID includes
Every ECZ-ID rests on the same governed identity foundation, maintained by ECZ-ID Core.
ECZ-ID Business Passport™
Your root parent identity credential. Carries legal identity, jurisdiction, and tier status. The authoritative spine for all downstream credentials.
Canonical identity record
A ledger-anchored canonical state record held by ECZ-ID Core. Verified and Assured build on the same identity foundation.
What paid activation adds
Verified and Assured activation provisions the operational surfaces and trust instruments below. Payment starts setup; activation completes after ECZ-ID Core provisioning.
Child Passports & Packages
Domain-specific credentials (Agent Credential, Product Passport, Cyber Resilience, etc.) that attach to your parent. Payment starts setup; activation completes after ECZ-ID Core provisioning.
Trust Badges
Embeddable SVG badge assets for every activated passport. Resolver-backed, machine-verifiable, deployable on your website, platform, or agent surface.
Public Resolver Page
A dedicated public verification page that proves your identity state to any counterparty, insurer, platform, or agent. Machine-readable and human-readable.
TrustOps Console Access
Full operational dashboard: manage passports, submit evidence, view ledger, configure authority delegation, access Business Passport API.
Welcome Delivery
Login credentials, resolver URL, badge embed codes, onboarding instructions, and next-step links delivered to your registered email.
33 child passports across 7 categories
Each child passport attaches to your parent Business Passport. Activate what you need. Each child inherits the authority chain from your root.
Child passports, packages and add-ons require a paid parent tier. Choose Verified or Assured above, then select the credentials your organisation needs.
Digital & Operational
7 passportsProduct, Risk & Transfer
3 passportsRobotics
3 passportsRoad & Freight Mobility
5 passportsAerial Mobility
4 passportsInfrastructure-Grade
8 passportsControl & Trust Overlays
3 passportsAll Packages
Packages group corridor-relevant child passports into a single acquisition object at package pricing. Select a package to credential your operations faster. Package prices include the parent Business Passport at the selected tier.
Packages require a paid parent tier — choose Verified or Assured first.
15 core packages shown below. 7 enterprise accelerators available. Know-Your-Agent acquisition lives in the dedicated MCP / Agent Trust top corridor above (KYA Starter, Verified KYA Ready, Assured KYA Ready).
The Digital Counterparty Infrastructure Pack™ and the 2 Commercial Outcome Packs (Trade Finance Release, Construction Dispute Resolution) have dedicated sections above and are not duplicated in this list.
DORA and SBOM packages have moved to the dedicated DORA / SBOM credentialing section above (Essentials, Managed, Enterprise, and Suite). They are no longer presented under the legacy “Vendor Pack” / “Liability Pack” names.
Advanced Infrastructure Services
Enterprise-grade infrastructure services with per-unit pricing. These services extend your ECZ-ID capabilities for specialised compliance, legal, audit, and underwriting requirements. Select to add to your order.
Your resolver-linked credential badges
Each ECZ-ID mandate plate is a verification gateway, not proof in itself. Every badge links — by URL and by QR — to the entity's page on resolver.ecocitizenz.org, where the current state is resolved live. Badges are distributed by TrustOps after activation; proof is always read from Resolver.
Business Passport — Tier Badge
Declared
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
Verified
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
Assured
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
Business Passport — State Badge
Active (template)
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
Degraded (template)
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
Revoked (template)
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
Show all 33 child passport mandate plates (by category)
Digital & Operational
Agent Credential
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
Cyber Resilience
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
API Passport
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
AI Model
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
Dataset
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
IoT Device
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
Software Supply Chain
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
Product, Risk & Transfer
Product Passport
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
Custody Transfer
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
Risk Policy
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
Robotics
Industrial Robot
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
Public-Space Robot
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
Domestic Robot
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
Road & Freight Mobility
Robotaxi
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
Autonomous Car
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
Autonomous Haulage Truck
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
Cross-Border Haulage Truck
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
High-Value Cargo Truck
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
Aerial Mobility
Drone Class D1
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
Drone Class D2
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
Drone Class D3
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
Drone Class D4
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
Infrastructure
Intermodal Transfer
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
Industrial Site
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
Critical Infrastructure
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
Financial Authority — Funds Flow
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
Marine Vessel
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
Cargo Container
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
Aircraft
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
Aviation Component
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
Control & Trust Overlays
Platform Safe Harbour
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
Identity Continuity
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
Licensed Infrastructure Operator
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
Customer-issued · Resolver-verified
Regulatory Credential Badges — DORA & SBOM
Each badge below is a customer-issued example of the artwork that ships with the credential. On any badge, click or scan reaches the issued entity's page at resolver.ecocitizenz.org/p/{ECZ_ID} — that is where the live state of the credential is read. The badge does not assert the state itself; Resolver does.
Distinct from passport mandate plates. Regulatory credential badges are portrait 240×320 and carry a coloured family bar. ECZ-ID passport mandate plates remain landscape 320×120. Two artefact families, one infrastructure-grade visual language.
Customer-issued example — live proof appears only after issuance.
ECZ-ID
Regulatory Credential
Vendor Credentialing — Essentials
DORA Essentials
This entity holds active ECZ-ID credentials constituting DORA Essentials vendor credentialing posture. Resolver-verifiable.
Family code
REG-DORA-ESSENTIALS
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
Customer-issued example
DORA Essentials
£319.96 /mo
ECZ-ID
Regulatory Credential
Vendor Credentialing — Managed
DORA Managed
Managed DORA posture with API passport, quarterly review and incident notification readiness. Resolver-verifiable.
Family code
REG-DORA-MANAGED
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
Customer-issued example
DORA Managed
£999 /mo
ECZ-ID
Regulatory Credential
Vendor Credentialing — Enterprise
DORA Enterprise
Multi-entity DORA structural posture with enterprise API access and structured documentation for regulator and audit review. Resolver-verifiable.
Family code
REG-DORA-ENTERPRISE
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
Customer-issued example
DORA Enterprise
£2,499 /mo
ECZ-ID
Regulatory Credential
Liability Credentialing — Essentials
SBOM Essentials
This entity holds active ECZ-ID credentials constituting SBOM Essentials liability credentialing posture. Resolver-verifiable.
Family code
REG-SBOM-ESSENTIALS
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
Customer-issued example
SBOM Essentials
£269.96 /mo
ECZ-ID
Regulatory Credential
Liability Credentialing — Managed
SBOM Managed
Managed SBOM posture with continuous vulnerability monitoring and ingestion analytics. Resolver-verifiable.
Family code
REG-SBOM-MANAGED
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
Customer-issued example
SBOM Managed
£899 /mo
ECZ-ID
Regulatory Credential
Liability Credentialing — Enterprise
SBOM Enterprise
Multi-product/entity SBOM structural posture with custody attestation and enterprise API access. Resolver-verifiable.
Family code
REG-SBOM-ENTERPRISE
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
Customer-issued example
SBOM Enterprise
£2,499 /mo
ECZ-ID
Regulatory Credential
Combined Suite — Enterprise
DORA + SBOM Suite
Combined DORA + SBOM structural posture for financial-sector technology vendors. Unified resolver profile. Resolver-verifiable.
Family code
REG-DORA-SBOM-SUITE
CLICK / SCAN TO VERIFY LIVE
resolver.ecocitizenz.org
Customer-issued example
DORA + SBOM Suite
£4,499 /mo
https://resolver.ecocitizenz.org/p/<ECZ_ID>. Click and scan reach the same target. Verification happens at Resolver, not on this host.How credential badges work: Each badge is a monochrome, print-safe mandate plate that reflects your live passport state. Embed with a single <img> tag and link to your resolver page for one-click verification. All 33 child passport badges plus the parent credential are provisioned when your passports are activated.
Official Resolver Preview — example only
How an ECZ-ID is verified at Resolver
Resolver is the public proof surface for ECZ-ID. The card and JSON below are an illustrative preview of what an entity's Resolver page can look like — they are not a live verification. Actual identity state is always checked live at resolver.ecocitizenz.org at the moment of verification. TrustOps provisions credentials; Resolver proves them.
ECZ-ID
Public Identity Resolver
Northbridge Systems Ltd
ECZ-FR-A48N3P
Jurisdiction: GB
Passports (resolved live)
Illustrative layout — actual timestamp and state are returned by Resolver at the moment of lookup.
ECZ-ID Trust Resolution Infrastructure · Resolver = proof
// EXAMPLE OUTPUT — illustrative only.
// Live identity state is always returned by Resolver at request time.
{
"ecz_id": "ECZ-FR-A48N3P",
"entity": "Northbridge Systems Ltd",
"jurisdiction": "GB",
"tier": "<resolved live at Resolver>",
"status": "<resolved live at Resolver>",
"passports": [
{ "code": "CYBER_RESILIENCE", "status": "<resolved live>" },
{ "code": "AI_MODEL", "status": "<resolved live>" },
{ "code": "AUTONOMOUS_CAR", "status": "<resolved live>" }
],
"resolver_url": "https://resolver.ecocitizenz.org/p/ECZ-FR-A48N3P"
}Agents, platforms, and insurers fetch this JSON shape from Resolver at the moment of verification. The example above documents the field layout — actual values are always returned live by Resolver, never by TrustOps.
Technical integration details
Agent operators and integration platforms can consume the ECZ-ID product catalogue, pricing taxonomy, SKU mappings, and deterministic acquisition endpoints as structured JSON. The manifest is the canonical machine-readable acquisition catalogue.
Full endpoint reference(collapsible)
# Product catalogue — full taxonomy, tiers, SKUs, pricing, corridors, intent routes
# Advisory URL analysis — recommends tier/passports/packages, writes nothing
POST /api/v1/url/analyse
Body: { url } — advisory only; no identity record, resolver entry, or ledger event is created.
# Create order intent — returns checkout URL; no order without explicit confirmation
POST /api/checkout
Body: { tier, childCodes[], bundleSkus[], acceleratorSkus[], method: "card" } — card-first launch; crypto is not available for payment today
# Full API catalogue (requires auth in production)
GET /api/catalog
# Verify identity state — public proof read; re-check before reliance
GET /api/resolver/{ecz_id} — machine JSON state
GET /resolve/{ecz_id} — human-readable page
Canonical public proof host: https://resolver.ecocitizenz.org — Resolver displays public proof; TrustOps does not write canonical records. Re-check before reliance.
# Conversion intent routes — preselect the recommended basket (no auto-checkout)
/start?intent=mcp|agent|api-software|cloud|business|dci#recommended-basket
/start?intent=dora-sbom|dora-essentials|dora-managed|dora-enterprise#recommended-basket
/start?intent=sbom-essentials|sbom-managed|sbom-enterprise|dora-sbom-suite#recommended-basket
/start?intent=trade-finance|construction|critical-cyber-resilience#recommended-basket
/start?intent=robotics-insurability|mobility-insurability|global-trade-marine#recommended-basket · /start?intent=robotics#full-catalogue
Payment starts setup; payment is not proof. Proof boundary: ECZ-ID Core controls credential state, Resolver displays public proof, local policy decides.
# Guided qualification flows — short prompts → recommended basket (no provisioning, no verification, no charge in-flow)
/start?flow=mcp|agent|api-software|cloud|business|dci|dora-sbom|critical-cyber-resilience|trade-construction|robotics-insurability|mobility-insurability|global-trade-marine
# End-to-end agent acquisition flow (card-first launch)
1. GET /api/start/manifest → read product catalogue, tiers, SKUs, pricing
2. POST /api/v1/url/analyse → recommended coverage + five setup baskets (advisory)
3. POST /api/agentic-checkout/intent → server-validated review/setup handoff
4. Human confirms the basket in review → card checkout (payment starts setup only)
5. Payment webhook confirms → ECZ-ID Core activation/provisioning
6. GET /api/resolver/{ecz_id} → re-check live state; Resolver proves, local policy decides
Crypto is not available for payment today — crypto rails remain in final proofing and are not part of the active acquisition flow. Register interest in crypto payment.
Why ECZ-ID matters
Identity, authority, and custody ambiguity is the root cause of underwriting friction, platform liability, automation failure, and compliance overhead. ECZ-ID gives agents a way to make state resolver-provable and gives businesses a reusable way to meet counterparty requirements. Local policy decides how much proof each counterparty requires.
Agents without resolver-verifiable identity are harder for counterparties to rely on. ECZ-ID Agent Credential™ makes agent capability resolver-provable.
Identity and custody ambiguity is the root cause of underwriting friction. ECZ-ID makes risk attributable, portable, and machine-verifiable.
Onboarding counterparties without authoritative identity proof creates liability exposure. ECZ-ID resolves this at infrastructure level.
Machines operating in the world need machine-readable, resolver-backed identity credentials. ECZ-ID is built for this from day one.
Compliance regimes demand attributable custody chains. ECZ-ID provides the governed identity spine that supports regulator, audit and compliance review.
Product passports, custody transfer, and SBOM credentials require an authoritative parent identity. ECZ-ID is that parent.
Need an ECZ-ID for your organisation?
Learn how ECZ-ID works, then acquire the Business Passport and credentials your organisation needs. Education lives at the developer site; acquisition happens here on TrustOps.
Acquire ECZ-ID. Prove state. Operate at scale.
Start with one ECZ-ID Business Passport™. Attach the child passports your operations require. Pay securely. Your credentials go live once provisioning completes.
Already an ECZ-ID customer? Sign in →