Didit Agent Skills
Twenty Didit skills for identity checks: the agent runs KYC, sanctions screening and biometric checks through the API
- 28 ★ on the repository
- Last commit
- MIT
Broad access
Why this level
- The API key opens verification sessions, users, billing and webhooks, and the scripts send people's face photos and documents to Didit
- The registration skill creates a Didit account by email and receives a key itself, and paid checks spend credits
- Face search and government database validation handle biometric and personal data
Install
- Works in
In your terminal, with SkillFoxx CLI
npx skillfoxx add skills/didit-agent-skillsDetects the agents on your machine, shows the access level and pins the version.
Other ways to install
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- The API key opens verification sessions, users, billing and webhooks, and the scripts send people's face photos and documents to Didit
- The registration skill creates a Didit account by email and receives a key itself, and paid checks spend credits
- Face search and government database validation handle biometric and personal data
This is third-party code. Review the repository files before installing.
What it does
The repository holds 20 skills that teach an agent to call the Didit identity verification API. The central skill, `didit-verification-management`, runs the account: registration, API keys, sessions, workflows, users and businesses, billing and webhook destinations. The rest cover single checks: documents and the machine-readable zone, selfie liveness, face match and search, age estimation, email and phone confirmation, sanctions screening, proof of address, transaction and event monitoring, and cases. An agent gets from nothing to a verification link in five API calls: register by email, confirm the code, create a workflow, add a webhook destination and open a session. Python scripts such as `screen_aml.py` and `estimate_age.py` sit next to the skills and must be copied with them. The `didit-mcp-server` skill connects Didit's hosted MCP server, where the assistant works in the account as its owner and needs no API key.
Who it is for. A fintech, marketplace or gaming team that is adding Didit customer verification and wants an agent to build the integration, workflows and webhooks.
Good fit when
- Customer onboarding needs a passport scan, a selfie and a face match, and the agent creates a KYC workflow and a verification session for it
- A service with an age limit declines users by selfie age estimation, and `didit-biometric-age-estimation` sets the decline threshold
- Before paying a counterparty you screen it against sanctions lists and open a case for manual review
- A shop hunts fraud networks, and `didit-fraud-networks` shows clusters of users that share devices, documents and phones
- The Didit SDK is going into a site or an app, and `didit-sdk-integration` walks the agent through the integration and the pre-release checks
Not a fit when
- You need another identity verification vendor: the skills call only the Didit API
- You have no Didit account and cannot register one: without an API key most skills do nothing
- Company policy forbids sending customer documents and faces to an outside service, and every check passes them to the Didit cloud
- You need verification fully on your own server: all calls go to the cloud API
Example request
Register a Didit account, create a KYC workflow with a document check and a selfie, and give me a link to a test sessionLimitations
- The skills work only with the Didit cloud API and need its key.
- Checks are paid in account credits. Account creation and top-up are described in the Getting Started section of each skill.
- Skills for authentication, electronic signatures and biometric consent are not in the set yet: the author is waiting for documented API contracts. Authentication SDKs depend on the release.
- Installation uses the generic `npx skills add` command, and the tool picks the agent and directory itself.
How to disable. Delete the `didit-*` folders from the agent's skills directory. Revoke the API key in the Business Console under Developers, API keys, and remove `DIDIT_API_KEY` and `DIDIT_WEBHOOK_SECRET` from the environment.
FAQ
How do I install the Didit skills in Claude Code?
`npx skills add didit-protocol/skills` installs the whole set, and `npx skills add didit-protocol/skills --skill didit-face-match` installs one skill. The tool detects the agent itself. Then put the key from the Business Console into `DIDIT_API_KEY`.
Do I need a Didit account before installing?
No. The `didit-verification-management` skill registers an account by email: the agent sends a request, confirms the six-character code from the email and gets the key in the response. The key goes into `DIDIT_API_KEY`.
How do the skills differ from the Didit MCP server?
The skills teach an agent to call the API directly, the key stays with you, and Python scripts come with them. The MCP server at `https://mcp.didit.me/mcp` works as the account owner without a key. The `didit-mcp-server` skill connects it.
Which checks does the set cover?
Documents, liveness and face match, face search across the enrolled base, age estimation, email and phone, AML screening, proof of address, validation against government databases in more than 60 countries, data extraction from documents, transaction and event monitoring, cases and fraud networks.
How do I verify webhook signatures?
The signing key `secret_shared_key` arrives when the webhook destination is created and is returned later by `GET /v3/webhook/destinations/{id}/`. Put it in `DIDIT_WEBHOOK_SECRET`; the management skill describes the signature check.
Discussion
No questions or reviews yet.
Related
SkillsA skill that gives an agent a decentralized DID on Billions Network and links it to its owner through a signature.
A security scanner for agent skills: finds prompt injection, data exfiltration and malicious code before you install
Cybersecurity Skills
Cybersecurity Skills for AI Agents
42 security skills for Claude Code, Cursor and Codex: code and cloud audits, authorization-gated pentesting and incident response
An MCP server with 47 tools: signed AI agent identities, W3C credentials, delegated permissions, an action log and EU AI Act documents
A practical security skills base for agents: web, API, privilege escalation, Active Directory, mobile, binaries and crypto
Security scanner for agent skills and MCP servers: finds prompt injection, data exfiltration and supply chain risks before install
README in short
The repository front page opens with a table of 20 skills with versions and descriptions. Next come three ways to install, two ways to get a key (programmatic registration and the console) and the hosted MCP server. The page ends with the API endpoints grouped by category.