Verifier

🚀 🧠 MCP PID Wallet Verifier

*A lightweight and AI-friendly MCP Server that allows any AI agent or MCP protocol-compliant assistant to initiate and verify the presentation of PID (Personal Identity Data) credentials via OIDC4VP.

This server is designed to support secure QR code wallet interactions and can be used in conjunction with Cline, OpenAI's GPTs (through custom tools), or any custom client following the MCP protocol.*

🚀 Quick Start

✨ Features

• ✅ Supports OIDC4VP Draft-13 and the direct_post response mode.
• ✅ Provides a two-step MCP REST tool for credential presentation.
• ✅ Automatically generates QR codes and openid-vc:// deep links.
• ✅ Receives SD-JWT-based credentials from EUDI-compliant wallets.
• ✅ Stateless session storage via Redis.
• ✅ Fully compliant with the MCP protocol, configured through .well-known/mcp/tools.

🔧 Provided Tools (MCP REST)

1. initiate_pid_request

Initiates an OIDC4VP credential presentation process. Returns a QR code and a session ID.

POST https://verifier.wallet-provider.com/tools/initiate_pid_request

Response

{
  "status": "pending",
  "instructions": "Scan this QR code to present your credentials using your wallet.",
  "session_id": "f1203ea7-d5...",
  "presentation_url": "openid-vc://?client_id=...",
  "qr_code_base64": "data:image/png;base64,..."
}

2. check_pid_result

Polls the status of the credential presentation.

POST https://verifier.wallet-provider.com/tools/check_pid_result

Request

{
  "session_id": "f1203ea7-d5..."
}

Possible Responses

• Pending:

{ "status": "pending" }

• Verified:

{
  "status": "verified",
  "verified_credential": {
    "given_name": "Jean",
    "family_name": "Dupont",
    "birth_date": "1975-06-23"
  }
}

• Error:

{ 
  "status": "error",
  "error_description": "Signature verification failed"
}

💻 Usage Examples

Basic Usage

This server enables AI agents to:

1. Request users to present their digital identities (PIDs).
2. Display scannable QR codes.
3. Wait for the wallet to return a response via OIDC4VP.
4. Extract and utilize verified attributes (e.g., name, date of birth).

It is well-suited for:

• Authentication processes
• Registration and service onboarding
• Compliance and anti-money laundering automation
• Government-level AI applications

🔧 Technical Details

• Python + Flask: The core framework for building the server.
• Redis: Used for session handling to ensure stateless operation.
• jwcrypto: Employed for JWT signature and verification.
• qrcode: Utilized for generating base64-encoded QR images.
• Compatibility: Compatible with EUDI-compliant wallets and SD-JWT.

📚 Documentation

MCP Tool Discovery

GET https://verifier.wallet-provider.com/.well-known/mcp/tools

Returns a JSON manifest describing available tools, input modes, and instructions.

Example Agents

You can test this server using local or scripted agents by calling:

• https://verifier.wallet-provider.com/tools/initiate_pid_request
• https://verifier.wallet-provider.com/tools/check_pid_result

📄 Security Considerations

• Temporary Data Storage: Uses setex to set expiration times for temporary data.
• Signature Verification: Employs HMAC and the verif_token() function for signature verification, ensuring the security of credentials.

🤝 Contact Information

For further information or collaboration, please contact:

• Email: contact@wallet-provider.com
• Website: https://www.wallet-provider.com