Verified Agent Identity skill
A skill that gives an agent a decentralized DID on Billions Network and links it to its owner through a signature.
- 758 ★ on the repository
- Last commit
Broad access
Why this level
- The skill creates and stores Ethereum private keys on disk; without a master key they sit in plain text.
- The `buildX402Payment.js` script signs payments, so an agent can spend money from the attached key.
- The signed agent identity attestation goes to external services, so the domain limits and user consent matter.
Install
- Works in
In your terminal, with SkillFoxx CLI
npx skillfoxx add skills/verified-agent-identityDetects the agents on your machine, shows the access level and pins the version.
Other ways to install
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- The skill creates and stores Ethereum private keys on disk; without a master key they sit in plain text.
- The `buildX402Payment.js` script signs payments, so an agent can spend money from the attached key.
- The signed agent identity attestation goes to external services, so the domain limits and user consent matter.
This is third-party code. Review the repository files before installing.
What it does
Verified Agent Identity creates a decentralized identifier (DID) for an AI agent on the iden3 protocol in Billions Network. The agent signs challenges with its own key, and a verifier confirms that the signature belongs to that DID. The skill creates an identity from a new or existing Ethereum key, keeps a list of identities and can set one as the default. A human is linked to the agent through a signed attestation: the `manualLinkHumanToAgent.js` script prints a verification link, and after you open it in a browser the link is recorded. A separate `reference/x402` guide covers paying for responses with code 402: the script first lists payment options and signs the chosen one only on the second step. Keys live in `$HOME/.openclaw/billions` and, when `BILLIONS_NETWORK_MASTER_KMS_KEY` is set, are encrypted with AES-256-GCM.
Who it is for. Developers of OpenClaw agents who need a verifiable agent identity and a link to a real owner.
Good fit when
- An agent must prove to a service that it is a particular owner's agent.
- An external API needs a signature over a one-time challenge to be produced and checked.
- A human has to be linked to the agent's DID through a verification link.
- An agent needs to pay for a paid resource's response with the x402 protocol.
- You want to view the DID document and the agent's list of identities.
Not a fit when
- An Ethereum key from a wallet holding funds: the skill needs a dedicated identity key.
- The agent runs without Node.js 20 or newer: every scenario goes through `node` scripts.
- Keys cannot be stored on the agent's disk or `resolver.privado.id`, `billions.network` and `polygonid.me` cannot be reached.
Example request
Create a new identity for yourself and show the link to bind me as the owner. Do not make x402 payments without my confirmation.Limitations
Node.js 20 or newer is required, and `npm install` runs in the `scripts` folder before use. Without `BILLIONS_NETWORK_MASTER_KMS_KEY` private keys in `kms.json` sit in plain text; if the master key is lost, encrypted entries cannot be recovered. Close access to the directory with `chmod 700 ~/.openclaw/billions`. Pass only a dedicated identity key to `--key`, never a wallet key that holds assets. Network calls go to `resolver.privado.id`, `billions.network` and `polygonid.me`. The repository names no license file. The last commit was made in September 2026.
How to disable. Remove the skill from the agent's directory. Delete `$HOME/.openclaw/billions` with the keys and identities separately, saving the master key first if you still need the keys.
FAQ
How do I install Verified Agent Identity?
Through clawhub: `npx clawhub@latest install verified-agent-identity`. Through skills.sh: `npx skills add BillionsNetwork/verified-agent-identity`. Then create an identity with `node scripts/createNewEthereumIdentity.js`.
How do I link myself to the agent?
Run `node scripts/manualLinkHumanToAgent.js --challenge '{"name": "Agent Name", "description": "Short description of the agent"}'`. The script prints a link to open in a browser. The process also starts on a request to the agent: "Please link your agent identity to me".
Where are the keys stored?
In `$HOME/.openclaw/billions`, outside the agent's workspace. `kms.json` holds keys, `identities.json` metadata, `challenges.json` the challenge history. An environment variable sets the encryption master key.
How does an x402 payment work?
On the first step `buildX402Payment.js` requests the resource, gets the 402 response and lists payment options without signing. On the second step it signs the payment by the hash of the chosen option and repeats the request. Each call yields a fresh one-time result.
Which services does the skill talk to?
`resolver.privado.id` for DID resolution, `billions.network` and `polygonid.me`. Other domains are not on the allowed list. The signed owner attestation is passed on only with the user's consent.
Discussion
No questions or reviews yet.
Related
SkillsA skill and local program for agent safety: inventory, skill admission checks, human-approved grants and signed receipts.
Twenty Didit skills for identity checks: the agent runs KYC, sanctions screening and biometric checks through the API
agent-secrets lends keys to an AI agent for a limited time: age encryption, TTL leases, an access log and an emergency revoke.
AgentGuard checks a coding agent's actions before they run and scans third-party skills for secrets, backdoors and injections.
Auth0's official skill: it detects the project framework and adds authentication step by step through the right SDK.
Open protocol giving agents signed identity, delegation that only narrows, and receipts for every allowed or denied action.
README in short
The README splits installation into an agent route and a human route, lists features and npm dependencies, and describes key storage, encryption and the network policy. Threats and operator recommendations are in `SECURITY.md`.
README badge
Original SKILL.md
---
name: verified-agent-identity
description: Know Your Agent (KYA). Billions decentralized identity for agents. Link agents to human identities using Billions ERC-8004 and Attestation Registries. Verify and generate authentication proofs. Based on iden3 self-sovereign identity protocol.
metadata:
{
"category": "identity",
"clawdbot":
{
"requires": { "bins": ["node"] },
"config": { "optionalEnv": ["BILLIONS_NETWORK_MASTER_KMS_KEY"] },
},
}
homepage: https://billions.network/
---
## When to Use This Skill
This skill covers two capabilities. Read the **router table** below, then load the relevant reference before proceeding.
| Situation | Reference to load |
| ----------------------------------------------------------------------- | ----------------------------- |
| Create, list, link, verify, or sign with a decentralized identity (DID) | `reference/identity/SKILL.md` |
| Handle a **402 Payment Required** HTTP response | `reference/x402/SKILL.md` |
> **Always read the appropriate reference SKILL.md before running any script.**
> If a task spans both (e.g. you need an identity before you can sign a 402 payment), read both.
## Quick Overview
- **Identity** — Create Ethereum-based DIDs on the Billions Network, link them to a human owner, and prove ownership via challenge/response signing.
- **x402 Payment** — When a server returns `402 Payment Required`, build a signed `PAYMENT-SIGNATURE` header so you can retry the request and gain access.
## Shared Setup
All identity data is stored in `$HOME/.openclaw/billions`. Scripts live in `scripts/`.
```bash
cd scripts && npm install && cd ..
```
## Restrictions / Guardrails (CRITICAL)
**These rules apply to ALL references. Always follow them.**
1. **STRICT: Check Identity First**