Skip to content
ECZ-ID MSPs & MSSPs
Free Trust Check

ECZ-ID for MSPs · Products

ECZ-ID Intent: the authorised objective and constraints of what a Passport may do

ECZ-ID Intent defines the authorised objective, constraints and validity of what a Passport may do. An Intent is authorised only by an owner or administrator, and nobody authorises their own request.

ECZ-ID Intent EssentialPaid · OpenBuy monthly
See ECZ-ID Intent Control

In an MSP client estate

Why ECZ-ID Intent matters for a managed estate

Who it is for

MSPs that need to write down, per client, what a machine actor is authorised to do — not just what it is technically able to do.

The MSP problem it addresses

Technical permission and customer authority drift apart: a tool can do more than the client ever agreed it should.

The client problem it addresses

The client cannot see, in one place, what each machine actor is authorised to do on its behalf and until when.

When to attach it to a client

Attach it where Customer Authority needs to be stated per machine actor with constraints and an end date — often after a Baseline shows an authority gap.

What the MSP receives

  • Authorised Intents for the Passports a plan covers.

What the client receives

  • A stated objective, constraints and validity for its machine actors, authorised by its own owner or administrator.

How it fits the recurring Machine Trust service

Intents are reviewed and renewed as part of keeping Customer Authority current.

Options, prices and state

Each option, as TrustOps lists it

Bought in TrustOps per tier (monthly or annual prepaid), sized by covered entities. Prices and what can be bought today come from TrustOps, which owns every purchase, entitlement and renewal.

ECZ-ID Intent

  • ECZ-ID Intent Essential

    Monthly£19.99 per monthPaid · OpenBuy monthlyIncludes covers up to 7 entities.
    Annual prepaid£199 — one payment for 12 months; it does not renewPaid · OpenBuy annualIncludes covers up to 7 entities.

  • ECZ-ID Intent Pro

    Monthly£49.99 per monthPaid · OpenBuy monthlyIncludes covers up to 25 entities.
    Annual prepaid£499 — one payment for 12 months; it does not renewPaid · OpenBuy annualIncludes covers up to 25 entities.

  • ECZ-ID Intent Business

    Monthly£149 per monthPaid · OpenBuy monthlyIncludes covers up to 100 entities.
    Annual prepaid£1,490 — one payment for 12 months; it does not renewPaid · OpenBuy annualIncludes covers up to 100 entities.

States and prices from the TrustOps catalogue snapshot of 2026-10-14; TrustOps shows the current state. Buying a capability changes what you can operate. It never changes what the public record proves, and no paid tier is a verification outcome.

What you get

In TrustOps' own words

  • ECZ-ID Intent Essential

    Defines the authorised objective, constraints and validity of what a Passport may do.

    Includes covers up to 7 entities.

How it works

In plain English

  1. 1An owner or administrator states what a Passport may do, within which constraints, until when.
  2. 2The Intent is authorised; nobody authorises their own request.
  3. 3Where an enforcement point mediates the action, it can use the Intent.

Inputs

  • The authorised objective, constraints and validity, set by an owner or administrator.

Outputs and evidence

  • An authorised Intent for each covered Passport.

With your existing stack

An Intent is enforced only where an enforcement point mediates the action; your existing controls keep enforcing.

Boundaries

What it does not do

  • Payment authorises nothing.
  • It does not evaluate a proposed action — that is ECZ-ID Intent Control.
  • It is not enforced unless an enforcement point mediates the action.

TrustOps terms for ECZ-ID Intent Essential

  • Payment authorises nothing: only an owner or administrator authorises.
  • Holding a Passport is never an authorisation.
  • A decision is evaluated, not enforced, unless an enforcement point mediates the action.
  • Covered and protected places do not use Active Entity Capacity.
  • A monthly plan cancels at the end of its period.
  • One active plan per service.

What buying it never changes

  • the ECZ-ID of any Passport
  • the Parent organisation tier
  • any Passport assurance (holding a Passport is never an authorisation)
  • Active Entity Capacity (covered and protected places never use it)
  • any authorisation: payment authorises nothing — only an owner or administrator authorises, and nobody authorises their own request
  • any Resolver record, until the owner publishes a proof

Proof and integration

Resolver and Developer Gateway

Resolver relationship

An Intent is not public until its owner publishes a proof; the Resolver shows what is published.

Developer Gateway route

In the MSP journey

What comes before and after

Usually comes after

Questions

ECZ-ID Intent: questions MSPs ask

How is ECZ-ID Intent different from ECZ-ID Intent Control?
ECZ-ID Intent defines the authorised objective and constraints. ECZ-ID Intent Control evaluates a proposed action against that authority. They can be bought separately or together.
Does holding a Passport authorise anything?
No. Holding a Passport is never an authorisation; an owner or administrator authorises each Intent.

Next step

Start with ECZ-ID Intent, or see everything you can attach

Paid · OpenBuy monthlyAll MSP products