Waxseal

[WaxSeal SDK]

WaxSeal SDK

Cryptographic identity for the open web and for AI agents.
One Ed25519 keypair. One 64-character fingerprint. Permanent on-chain record.

waxseal.id · Developer Docs · Get your seal

[MIT License] [TypeScript] [REST API] [@waxseal/verify on npm] [@waxseal/mcp on npm] [Glama MCP score]

Packages

@waxseal/mcp — for AI agents

[Smithery] [npm]

Give Claude, Cursor, Windsurf, or VS Code Copilot a cryptographic identity layer in under two minutes.

{  "mcpServers": {    "waxseal": {      "command": "npx",      "args": ["-y", "@waxseal/mcp"],      "env": {        "WAXSEAL_PRIVATE_KEY_PEM": "-----BEGIN PRIVATE KEY-----\n<your key>\n-----END PRIVATE KEY-----"      }    }  }}

No install needed. Use the hosted server in any HTTP-capable MCP client: https://api.waxseal.id/mcp

What the 6 tools give your agent:

Verify-only tools work with zero configuration. Signing tools require WAXSEAL_PRIVATE_KEY_PEM.

→ Full MCP docs · Smithery listing · npm

@waxseal/verify — for apps and backends {#waxsealverify}

npm install @waxseal/verify

Works in React, Vue, Node.js, n8n, serverless functions, and any runtime with fetch.

[WaxSeal examples]

Two modes, one fingerprint

Mode 1 · Badge Verification

"Does this WaxSeal exist and is it real?"

Confirm a seal is on-chain. No user interaction required — the fingerprint alone is enough.

Use cases

• ✦ Verified author badge on blog posts and articles
• ✦ Contributor identity on GitHub-style tools
• ✦ Publisher verification on CMS platforms
• ✦ Prove you created something before AI did

import { verifySeal } from "@waxseal/verify";
const seal = await verifySeal({ fingerprint: "a1b2c3d4..." });
if (seal.valid && seal.onChain) {  console.log(seal.displayName, "·", seal.chain);  // "Ada Lovelace · base"}

Mode 2 · Login & Action Approval

"Did this person sign this, right now?"

A signed challenge proves the key holder is present — replaces passwords, OTP, and email loops entirely.

Use cases

• ✦ Passwordless sign-in — no email, no OTP, no credentials to breach
• ✦ Approve a document or high-value transaction
• ✦ Gate a comment, post, or vote behind verified identity
• ✦ Issue an API key only to verified seal holders
• ✦ Automate identity checks in n8n / Make.com / Zapier

const seal = await verifySeal({  fingerprint: "a1b2c3d4...",  message:     "I approve this transfer.",  signature:   "base64url...",});
if (seal.valid && seal.onChain && seal.signatureValid) {  // Cryptographic proof — no password, no session token}

React Badge

import { WaxSealBadge } from "@waxseal/verify/badge";
<WaxSealBadge fingerprint="a1b2c3d4..." />

Or build your own:

import { useEffect, useState } from "react";import { verifySeal, type VerifyResult } from "@waxseal/verify";
export function SealBadge({ fingerprint }: { fingerprint: string }) {  const [seal, setSeal] = useState<VerifyResult | null>(null);
  useEffect(() => {    let active = true;    verifySeal({ fingerprint }).then((r) => active && setSeal(r));    return () => { active = false; };  }, [fingerprint]);
  if (!seal?.valid || !seal.onChain) return null;
  return (    <a href={`https://waxseal.id/seal/${seal.fingerprint}`} target="_blank" rel="noopener noreferrer">      ✦ {seal.displayName ?? seal.fingerprint.slice(0, 8)}    </a>  );}

HTML Embed (no build step)

<script src="https://waxseal.id/embed.js"></script><span data-wax-seal="YOUR_64_CHAR_FINGERPRINT"></span>

Email — script tags are blocked by mail clients. Use a plain link instead: <a href="https://waxseal.id/seal/YOUR_FINGERPRINT">Verify my Wax Seal</a>

Webhook Verification

import { verifyWebhookSignature, isWaxSealWebhookEvent } from "@waxseal/verify/webhooks";
app.post("/webhook/waxseal", express.raw({ type: "*/*" }), (req, res) => {  const valid = verifyWebhookSignature({    body:      req.body,    signature: String(req.headers["x-waxseal-signature"]),    secret:    process.env.WAXSEAL_WEBHOOK_SECRET,  });
  if (!valid) return res.status(401).send("Invalid signature");
  const event = JSON.parse(req.body.toString());
  if (isWaxSealWebhookEvent(event, "seal.minted")) {    console.log("New seal:", event.data.fingerprint, "on", event.data.chain);  }
  res.sendStatus(200);});

Webhook events

REST API — no SDK, no key required

POST https://api.waxseal.id/v1/verifyContent-Type: application/json
{  "fingerprint": "<64-char hex>",  "message":     "...",  "signature":   "..."}

{  "valid": true,  "onChain": true,  "chain": "base",  "displayName": "Ada Lovelace",  "walletAddress": "0x…",  "signatureValid": true,  "verifiedAt": "2026-01-01T00:00:00Z"}

Works with everything

VerifyResult type

type VerifyResult = {  valid: boolean;  fingerprint: string;  onChain: boolean;  chain?: "ethereum" | "base" | "bnb";  walletAddress?: string;  displayName?: string;  publicKeyConfirmed?: boolean;  signatureValid?: boolean;  verifiedAt?: string;  error?: string;};

MIT © Wax Seal