You own it.
Plain markdown in a folder you keep, under an open specification. Run it locally, self-host the server, or use the hosted Passport.
Your company's facts, departments and taste live in a folder of markdown files you own. ChatGPT, Claude, Cursor and Principia read it over MCP, a few hundred tokens at a time. The format is an open, portable standard.
# Acme Acme sells calm invoicing software to small creative agencies. mission: Make getting paid boring for agencies of 2 to 20 people audience: Agency owners who hate chasing invoices product: Acme Invoicing sends invoices and polite reminders on its own goal: Reach $10k MRR by 2027-03 constraint: No paid ads until $10k MRR likes: Plain, short copy with one idea per sentence (x4); Real customer quotes over stock imagery (x2) dislikes: Growth-hack tone like "10x" or "crush it" (x3); Emojis in headlines prefers: Stripe over PayPal for anything billing avoid: Promising ship dates in public (x2) departments: Engineering (Builds and runs Acme Invoicing); Marketing (Tells agencies Acme exists, in Acme's calm voice)
Open Passport is a company memory you can read, review and take anywhere, served to every AI app over MCP.
$ open-passport import chatgpt.zip --into ./acme --proposeThen add one MCP URL to your apps: https://open-passport-jk24ip6aka-uc.a.run.app/v1/passports/<id>/mcp
Four layers over one folder. The files are the source of truth; everything above them is rules about who writes, who reads and how much.
Read from the base up: 01 is the folder, 04 is what an app receives.
A folder of Obsidian-compatible markdown notes: the company card, departments, people, decisions and taste. One fact per line, each with an id, who wrote it and the date. A replaced fact moves to the note's dated History instead of being overwritten.
- [decision] Use Stripe for invoices and payouts; PayPal only on request (user, 2026-09-20) ^f-decibill01 - [superseded] Long-form storytelling emails (by ^f-tastelik01; user, 2026-10-12) ^f-tasteold01
Apps and importers propose; a person accepts or rejects. Nothing is written silently unless you mark an app as trusted. Keys, tokens and passwords are refused before they are stored.
remember → { "status": "proposed", "proposal": "pp-1a2b3c4d5e6f7a8b" }Each department keeps its own charter, people, processes and taste. Every app gets a grant for the company card plus the departments you choose, and you can revoke it any time.
read:l0 read:department:marketing write:proposals
Every app reads the same three tiers: the card is always loaded, one department's slot is loaded for the task, everything else is searched when needed.
An agent working for one department starts with at most ~900 tokens. Acme's marketing agent starts with 306.
Web apps add your passport by URL and sign in with OAuth. Desktop apps and coding agents can also run it locally over MCP.
Import what you already have: a ChatGPT or Claude export, Notion, Obsidian, your website. Or let Principia keep it as you work. Then review what came in.
$ open-passport import chatgpt.zip --into ./acme --propose $ open-passport proposals ./acme
Upload it to the hosted Passport, or self-host the same server. Each passport gets one endpoint for every app.
https://open-passport-jk24ip6aka-uc.a.run.app/v1/passports/<id>/mcpchatgpt.com/plugins → + → Add custom MCP server. Paste the URL, choose OAuth, then Create.
Name Acme Passport URL https://open-passport-jk24ip6aka-uc.a.run.app/v1/passports/acme/mcp Auth OAuth
Each app signs in and asks what it may see: the company card (~180 tokens), each department, everything on demand. What it learns comes back as a proposal you accept. Revoke any app any time.
Full setup guidePlain markdown in a folder you keep, under an open specification. Run it locally, self-host the server, or use the hosted Passport.
Each app sees the company card and only the departments you granted it. Shared answers still work where the grant allows.
A retracted fact leaves every render. On the held-out test, 55 of 58 erasures left nothing behind, derived summaries included.
Likes, dislikes, preferences and hard nos, each with an example and a count of how often it was confirmed.
Every line carries who wrote it and the date. Replaced facts move to a dated History, so the old value is still on record.
MCP with OAuth for ChatGPT and Claude, stdio for desktop apps and coding agents, REST for your own code. The same six tools everywhere.
The same small surface in every app, filtered by what the app was granted.
Not a copy per tool. Every app reads the same passport, so a fact fixed once is fixed everywhere.
Added as a custom MCP server with OAuth. Search and fetch serve deep research; writes on Business, Enterprise and Edu.
A custom connector in Claude.ai, Desktop and the mobile apps. Reads and writes.
Claude Code, Cursor, VS Code, Codex, Windsurf and Gemini CLI run it locally over stdio, or use the URL.
Built in: the company vault is the passport, kept current as the agents work.
REST with a scoped key, or a plain-text or AGENTS.md render for any prompt.
And what they sent back. Likes, dislikes, preferences and hard nos, each with evidence and a count of how often it was confirmed. Taste ranks ahead of ordinary facts, so every agent writes in your voice from the first draft.
example: [[Launch email v2]]
example: "sent back: drop the !!"
example: [[Billing provider]]
example: "we got burned in May"
Evidence first. Seen again, a taste is reinforced, not duplicated.
Principia runs AI agents for a company. Each company's vault there is an Open Passport, so the format is used every day, by agents, on real work.
The hosted Passport is in private beta. We have no outside case studies to show yet.
One held-out test, run once on 26 October 2026, on data sealed before Open Passport was frozen. Open Passport did not beat Mem0 or per-department vector search overall. The losses come first.
Every system used the same answering model, embedder and answer prompt. Mem0 2.2.1, open source, in its best configuration per test.
LossReal company history. Per-department vector search 220, plain vector search 221. This loss decided the test.
Kubernetes enhancement-proposal history, unseen until the test; 300 questions
LossDurable facts after 24 months of company activity.
300 questions; 95% CI −7.0 to −1.7
WinHouse style: answers in the company's own voice. +18.0 against per-department vector search.
180 questions; 95% CI 33.6 to 41.5
WinErasures with nothing left behind, derived summaries included. Per-department vector search 46/58.
58 erasure requests
WinCurrent preferences, when the system knows who is asking.
576 questions; 95% CI 6.9 to 17.5
Measured on development-set data Open Passport was tuned on. Indicative, and it favours Open Passport.
DevelopmentShared cross-department answers right, with 0 leaks in 24 probes. With their own per-department scoping on, the others also leaked 0–1, and answered none. Private and useful, not fewer leaks.
Development set, study 2; 16 shared questions, 24 leak probes
open-passport mcp serves a folder to desktop apps over stdio. To self-host, run the reference server as one container (Docker, Fly.io or Render). The hosted Passport runs the same server for you and is in private beta.Importers pull out first-person facts and taste, skip secrets and contact details, and hand you the result to review.
Import → candidates, deduplicated and ranked → proposals → you accept or reject. Nothing is written silently.
Custom instructions, saved memories and your own messages.
Your messages, project instructions and project docs.
Any exported workspace or markdown folder.
Homepage and About page become a company card draft.
A brief, a memory dump, notes from a call.
Your company vault, kept current as you work.
A passport is a folder or a .passport.zip any tool can read. No database, no embeddings, nothing executable.
We run the reference host for you: a remote MCP endpoint per passport, ready for ChatGPT and Claude, synced with Principia.
What apps learn waits for you, unless you trust that app.
Keys, tokens and passwords are refused before they are stored.
Each app sees only the tiers and departments you allowed.
Every request and tool call is logged per passport.
The hosted Passport is in private beta. The standard is open today.
Early access to the hosted Passport. Or write to hello@openpassport.example
Ask an assistant about Open Passport.