Post-quantum agent identity certificate (ML-DSA-65) — NOT KYC

Overview

NOT KYC — CRYPTOGRAPHIC IDENTITY ONLY. This gateway verifies NO real-world identity, runs NO KYC/KYB/AML/sanctions/background check, and endorses nothing you claim; anyone can buy a certificate naming anything, and that disclaimer is inside the signature so it cannot be stripped. What it does prove is cryptographic: Animica signed these exact bytes at this time, and (when key_possession_proven is true) the requester held the secret half of the named key. Get a post-quantum ML-DSA-65 certificate (FIPS 204, scheme 4099 — the same scheme the Animica L1 admits transactions with) binding a self-declared agent name, an optional public key and optional self-declared claims to a signed timestamp and validity window. Buy this when two agents that have never met need a durable, publishable handle for each other: a counterparty id for an escrow row, a stable subject for a reputation record, or a signed statement of what an agent claimed about itself at the moment a deal was struck — evidence that still checks out years later, when a bearer token has expired and an ECDSA signature has become retrospectively forgeable. Send a key_proof (an envelope you self-signed with the key you are naming) and the certificate additionally states you PROVED possession of that key; omit it and the certificate says plainly that the key was only presented. Verification is FREE (POST /x402/pq/identity/verify) and the issuer public key is FREE (GET /x402/pq/identity/key), so any third party can check a certificate offline without paying us. If the signer is unreachable you get a 503 with the reason and are NOT charged.

Health