Introduction
Verifiables platform overview. Issue, verify, and manage digital credentials
Verifiables is a platform for issuing, verifying, and managing digital credentials. It implements open standards for identity and document verification across mobile and web.
What you can do
- Issue credentials: Create and deliver verifiable credentials in mDoc (ISO 18013-5) and SD-JWT VC formats using OpenID for Verifiable Credential Issuance (OID4VCI)
- Verify credentials: Request and verify credential presentations using OpenID for Verifiable Presentations (OID4VP) with DCQL queries, in the browser via the Digital Credentials API, or in person over BLE proximity
- Verify documents: Scan and verify 2D-DOC and VDS barcodes with document comparison, and read ID cards and passports over NFC
- Verify liveness: Liveness and face match sessions through a hosted capture page or an API-only analysis: server-verified challenges, media forensics, optional match against a reference photo
- Verify phone numbers: CAMARA telecom checks (SIM swap, identity match, operator lookup) and silent carrier verification
- Monitor companies: Watch companies for registry and publication events with webhook delivery
- Digital Product Passports: Issue and serve EU Digital Product Passports with selective disclosure
Architecture
The platform consists of:
| Component | Description |
|---|---|
| API | Backend handling credential issuance, verification, document processing, phone checks, and company monitoring |
| SDK | JavaScript client for integrating verification and issuance into your application |
| Dashboard | Multi-tenant web dashboard for managing organizations, API keys, templates, and monitoring |
| MCP bridge | Identity bridge that lets AI agents request wallet-verified credentials over the Model Context Protocol |
Standards
Verifiables implements the following specifications:
- OID4VCI: OpenID for Verifiable Credential Issuance 1.0
- OID4VP: OpenID for Verifiable Presentations 1.0 (+ Draft 18 legacy)
- HAIP 1.0: OpenID4VC High Assurance Interoperability Profile
- ISO 18013-5: Mobile Driving License (mDL / mDoc)
- SD-JWT VC: Selective Disclosure JWT Verifiable Credentials
- DCQL: Digital Credentials Query Language
- 2D-DOC: ANTS French document security barcode (AFNOR XP Z42-105)
- VDS: Visible Digital Seal (ISO 22376)
- EUDI: EU Digital Identity framework
Authentication
Developer-facing API endpoints are protected by API keys (opaque oat_... access tokens). You create keys from the dashboard and choose their kind at creation:
- Publishable key: Safe for frontend use, restricted to allow-listed browser origins. Covers verification requests, credential offer creation (
POST /oid4vci/offers), document and phone checks, liveness sessions. - Secret key: Server-side only. Everything publishable keys can do, plus write operations like template creation, document analysis, DPP issuance, OCR verification, and API-only liveness analysis.
Wallet-facing OID4VC protocol endpoints are keyless by design. See Authentication for details.