Now in production

The trust layerfor the AI economy.

Give your AI agents a cryptographic identity. Verify trust in under 50ms. Maintain a tamper-evident audit trail for every action — automatically.

For agent owners

Register your agent

Get a DID and signed JWT in seconds. Store it as AGENT_TOKEN — your agent sends it on every request.

Register free →
For service developers

Verify agents calling your API

One /verify call. 50ms. Know exactly which agent is calling you, what it's authorized to do, and log everything.

<50ms

Verification latency

ES256

Cryptographic standard

SHA-256

Audit hash chain

100%

Event coverage

Capabilities

Everything AI agents need
to prove who they are.

W3C Standard

Decentralized Identifiers

Every agent gets a globally unique DID — did:kairos:abc123 — issued instantly at registration. No central authority required.

ES256 / EdDSA

Cryptographic JWTs

ES256-signed tokens that any system can verify offline using your public JWKS endpoint. Zero-trust by design.

Granular control

Permission Scopes

Fine-grained scope grants per agent. read:email, write:files, call:agents — explicitly approved, instantly revokable.

Immutable

Hash-chained Audit Log

Every verification event is SHA-256 chained to the previous entry. Tamper-evident by construction — not by policy.

<100ms

Instant Revocation

One API call revokes an agent permanently. All future /verify calls fail immediately — no token expiry window to wait for.

Real-time

Anomaly Detection

Automatic flagging of agents with unusual call volumes, high denial rates, or requests for new scopes outside their profile.

Integration

Three calls.
Complete trust infrastructure.

01

Register your agent

Submit your agent's name, capabilities, and public key. Get back a DID and a signed JWT. Store the JWT in your agent's environment variables — it's your agent's identity.

POST /api/v1/agents/register
02

Verify on every call

Your agent sends its JWT on every request. The receiving service calls /verify with that token — getting an allow/deny decision in under 50ms.

POST /api/v1/verify
03

Revoke instantly

If an agent is compromised or no longer needed, revoke it. Every future verification is denied immediately — no waiting for tokens to expire.

POST /api/v1/agents/:did/revoke
verify.ts
// Verify an agent before granting access
const response = await fetch(
'https://identity.kairosaistudio.com/api/v1/verify',
{
method: 'POST',
headers: { 'Authorization': `Bearer ${apiKey}` },
body: JSON.stringify({
token: agentJwt,
scopes_requested: ['read:email'],
}),
}
)
const { allowed, agent } = await response.json()
if (!allowed) throw new Error('Agent not authorized')
// ✓ agent.active_scopes: ['read:email']
// ✓ agent.did: 'did:kairos:abc123'
// ✓ Logged to tamper-evident audit trail

Pricing

Start free. Scale when ready.

No credit card required to get started.

Free

$0forever

For developers getting started

  • 10,000 verifications/month
  • Up to 5 agents
  • Basic audit log
  • 24h JWT expiry
  • Community support
Get started
Most popular

Pro

$29per month

For teams building at scale

  • 500,000 verifications/month
  • Unlimited agents
  • Full audit log + export
  • Custom JWT expiry
  • Anomaly detection
  • Webhook notifications
  • Priority support
Start Pro

Enterprise

Customcontact us

For compliance-critical deployments

  • Unlimited verifications
  • Unlimited agents
  • SOC2 audit reports
  • SLA guarantees
  • Custom data retention
  • Dedicated support
  • On-premise option
Contact us

Get started today

Your AI agents deserve
a verified identity.

Join the developers building trustworthy AI systems with KairosAI Identity.