About CredentAgent

The consent layer for AI agents: an open-source Node library that makes an agent get proof from the human's own wallet before a consequential action completes.

What it is

CredentAgent is a library for MCP servers — the servers that give AI agents like Claude, ChatGPT and Goose their tools. A developer puts a tool such as a checkout, a 21+ item or a member price behind a policy, for example required(age.over(21)). When an agent calls that tool, the server answers with an approve link instead of a yes. The human opens it and proves the credential from their phone wallet over OpenID4VP; the server verifies the proof, re-prices the order itself and only then completes it. The agent never holds a credential. Identity leads; payments is one application.

It ships as two npm packages, versioned in lockstep: @openmobilehub/credentagent-gate, which gates the tools you already have, and @openmobilehub/credentagent-storefront, a ready-to-run gated MCP store.

Who is behind it

CredentAgent is an Open Mobile Hub project. Open Mobile Hub is a Series of LF Projects, LLC, part of the Linux Foundation. The project works with the OpenWallet Foundation and the AAIF Foundation, and builds on the OpenWallet Foundation's Multipaz SDK and wallet for the credential side. It is developed in the open on GitHub under the Apache-2.0 license, and contributions are welcome.

Where it stands

CredentAgent is pre-1.0 and honest about it. Passkey approvals, signed webhooks, wallet device signatures over a spending grant's limits and server-side enforcement are real today. Wallet credential checks (age, membership, payment) are presence-only-demo: the wire cryptography is real, but there is no issuer trust anchor yet, so a self-crafted credential would pass. Issuer-verified trust is the next milestone. The status section on the homepage lists every rail and its trust level, and the site never claims more than the library enforces.

Built on open standards

OpenID for Verifiable Presentations (OpenID4VP), WebAuthn passkeys, ISO/IEC 18013-5 mdoc, the Agent Payments Protocol (AP2), the Model Context Protocol (MCP) and Multipaz.