Soulprint Documentation

Decentralized identity & reputation for AI agents — open protocol, on-device proofs, zero PII uploaded.

What is Soulprint?

Soulprint is a decentralized identity layer that proves a real human is behind any AI agent — without sending biometric data to any server. It combines two signals into a single 100-point trust score:

Identity score (0–80): derived from government ID + face match, verified locally via OCR and biometrics, optionally anchored by a privacy-preserving proof
Bot reputation (0–20): assigned by the validator network based on observed agent behavior — good behavior earns attestations, spam/abuse loses them

Every verified agent gets a DID (Decentralized Identifier) and a signed SPT (Soulprint Token) that any MCP server, OpenClaw bot, or REST API can verify in milliseconds — even offline.

How It Works

Human verifies once

The user runs npx soulprint verify-me on their device. OCR reads their ID document, InsightFace matches their selfie, and a privacy-preserving proof is generated — all locally. Result: a signed identity token stored on-device.

Agent carries the token

The AI agent (OpenClaw bot, MCP client, CLI) includes the SPT token in its requests via X-Soulprint or x-soulprint-token headers. No credentials, no passwords — just the proof.

Service verifies & gates access

A Soulprint middleware (soulprint-mcp or soulprint-express) validates the token, checks the score, and grants or denies access to the protected tool or endpoint. Verification is instant — no network round-trip needed for cached tokens.

Validator network tracks reputation

Validator nodes gossip attestations via a peer-to-peer mesh. Good behavior (diverse tool use, no spam) earns +1 attestation up to 20 points. Bad behavior (rate abuse) loses points. Reputation is decentralized — no central authority.

Architecture: 7 npm Packages

Package	Role	Use when
`soulprint`	CLI	End users run `npx soulprint verify-me`
`soulprint-core`	DID, tokens, attestations	Building custom identity logic
`soulprint-verify`	OCR + face recognition	On-demand local verification pipeline
`soulprint-zkp`	Proof prover & verifier	Privacy-preserving proof generation
`soulprint-network`	HTTP validator + P2P node	Running a validator node
`soulprint-mcp`	MCP middleware	Protecting MCP server tools
`soulprint-express`	Express/Fastify middleware	Protecting REST APIs