mcpField
V
verified-agent-identity

verified-agent-identity

github.com/billionsnetworkSecurity7568.2k installsUpdated 23w ago
Repository

About verified-agent-identity

verified-agent-identity is a skill for managing Billions Network Ethereum-based decentralized identities and handling x402 payment challenges. It routes tasks to reference guides and imposes checks before scripts run.

Key features

  1. 01Creates and lists decentralized identities
  2. 02Links identities to human owners
  3. 03Verifies ownership through signed challenges
  4. 04Builds signed x402 payment headers
  5. 05Enforces identity and script-failure checks

Use cases

  1. 01Creating or linking an agent identity
  2. 02Proving identity ownership
  3. 03Retrying a request after an HTTP 402 response

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/billionsnetwork/verified-agent-identity --skill verified-agent-identity

After installing, type/verified-agent-identityin Claude Code to confirm it loaded.

Bundled files

References and scripts installed along with SKILL.md.

.clawhubignore
SECURITY.md
prompt.json
README.md
promptfooconfig.yaml
.gitignore
.github/workflows/
evaluate-skill.yml
publish.yml
scripts/
createNewEthereumIdentity.js
getDidDocument.js
generateChallenge.js
getIdentities.js
package.json
buildX402Payment.js
linkHumanToAgent.js
manualLinkHumanToAgent.js
package-lock.json
scripts/shared/
bootstrap.js
attestation.js
constants.js
scopes.js
scripts/shared/storage/
base.js
challenge.js
did.js
keys.js
crypto.js
identities.js
scripts/shared/utils/
auth.js
index.js
did.js

Details

From the project README

When to Use This Skill

This skill covers two capabilities. Read the router table below, then load the relevant reference before proceeding.

SituationReference to load
Create, list, link, verify, or sign with a decentralized identity (DID)reference/identity/SKILL.md
Handle a 402 Payment Required HTTP responsereference/x402/SKILL.md

Always read the appropriate reference SKILL.md before running any script. If a task spans both (e.g. you need an identity before you can sign a 402 payment), read both.

Quick Overview

  • Identity — Create Ethereum-based DIDs on the Billions Network, link them to a human owner, and prove ownership via challenge/response signing.
  • x402 Payment — When a server returns 402 Payment Required, build a signed PAYMENT-SIGNATURE header so you can retry the request and gain access.

Shared Setup

All identity data is stored in $HOME/.openclaw/billions. Scripts live in scripts/.

cd scripts && npm install && cd ..

Restrictions / Guardrails (CRITICAL)

These rules apply to ALL references. Always follow them.

  1. STRICT: Check Identity First

    • Before running linkHumanToAgent.js, signChallenge.js, or buildX402Payment.js, ALWAYS check if an identity exists: node scripts/getIdentities.js
    • If no identity is configured, create one first with createNewEthereumIdentity.js after that run linkHumanToAgent.js to link it to a human owner.
    • Continue processing the task only after confirming that an identity exists and is linked to a human owner.

  2. STRICT: Stop on Script Failure

    • If any script exits with a non-zero status code, STOP IMMEDIATELY.
    • Check stderr for error messages.
    • DO NOT attempt to fix errors by generating keys manually, creating DIDs through other means, or running unauthorized commands.
    • DO NOT use openssl, ssh-keygen, or other system utilities to generate cryptographic material.

  3. No Manual Workarounds

    • You are prohibited from performing manual cryptographic operations.
    • You are prohibited from directly manipulating files in $HOME/.openclaw/billions.
    • Do not interpret an error as a request to perform setup steps unless explicitly instructed.

Security

The directory $HOME/.openclaw/billions contains sensitive identity data:

  • kms.json — CRITICAL: Contains private keys (encrypted if BILLIONS_NETWORK_MASTER_KMS_KEY is set, otherwise plaintext)
  • defaultDid.json — DID identifiers and public keys
  • challenges.json — Authentication challenges history
  • credentials.json — Verifiable credentials
  • identities.json — Identity metadata
  • profiles.json — Profile data

After the first run, restrict access to this directory: chmod 700 ~/.openclaw/billions

There are several ways of storing private keys, to enable master key encryption as described in the KMS Encryption section below.

More about security: ./SECURITY.md

Comments

Markdown supported