The Open Trust & Compliance Platform
Verifiable identity and delegated authority, built on open standards. Rooted in verified human accountability. Owned by no one.
The trust gap
An agent can open a browser, fill a cart, sign a form, move money, and negotiate with another agent on the other side of the world, all on your behalf, while you sleep. Thrilling. Also a trust crisis hiding inside a productivity boom. When an agent shows up and says "I'm here on behalf of David," how does anyone know that's true?
Every bank, exchange, marketplace and platform asks for the same documents. No portability, and your data is copied everywhere.
AI agents book, buy and sign on your behalf. But no merchant can tell whether a human actually authorized a specific action.
Stablecoins settle real commerce now, yet lack the authorization layer that card networks have taken for granted for decades.
Strip the whole problem down and it is three words long.
Humans + AI agents, One Trust Layer
Human trust and agent trust aren't two problems. They're one problem seen from two angles. An agent's authority has to root in a verified person or company. So a person holds verifiable credentials and proves only what a transaction needs; that same person mints scoped, revocable authority for an agent that inherits their verified status, never their whole identity.
The privacy machinery is identical on both sides. Build it once, for people. Extend it to their agents.
Rooted in verified human authority
A permission slip an agent carries and presents, proving a verified person authorized this, within these limits, until this date. The authority travels with the agent, and a verifier can check it by its signature.
The lifecycle
Trust is not a one-time stamp. A credential is issued, held, verified, delegated, revoked and recovered, and each step is verifiable by anyone it touches.
A credential is minted by a party trusted to state the fact, and handed to its holder.
It lives in the holder's wallet, under keys that never leave the device.
A counterparty checks exactly the claim it needs, and learns nothing else.
The holder grants an agent a narrower slice of authority: what, where, how much, how long.
Any grant can be cut at any moment, and everything delegated under it goes with it.
Losing a device is not losing an identity. Verify again, and your credentials are reissued.
What OTCP ships
Hold every credential, ID, KYC, age, eligibility, and reveal only what each verifier needs, nothing more.
Verify a human, or an agent, in one API call: a 30-minute integration, with signature, issuer trust, status and compliance all checked for you.
Issue scoped, revocable authority to AI agents, verified through the very same endpoint as a normal credential.
See the flows in detail on How it works, integrate via the developer page, or try a live verification in your browser.
Everyday moments
Proving age, holding your credentials, and handing bounded authority to an AI agent.
Share one signed "yes", never your birthday, name, or document.
Government ID, bank KYC, age and employment, issued to you, held by you.
Hand it a budget it can't exceed, with step-up approval and instant revoke.
Open by construction
Trust infrastructure's value comes entirely from neutrality. The instant it becomes a walled garden, a proprietary format, a closed list of who's allowed to be trusted, a mandatory toll booth, it stops being infrastructure and becomes a chokepoint. Governments, banks, and regulators will not build accountability on someone else's chokepoint.
Built on the open standards the world is already converging on, including the formats Europe's digital identity wallet mandates.
Consume the federated trust registries public authorities already operate. Don't appoint yourself the gatekeeper.
Every wallet works with any compliant issuer and presents to any compliant verifier. One option among many, never a toll booth.
OTCP authorizes; it never settles. Any asset, any rail, chosen by the parties transacting, with no cut of the payment.
Privacy by default
The technique that lets a person prove "I'm over 18" without a birth date is the same one that lets an agent prove "a verified adult authorized this" without revealing the adult. A verifier can request more. It can never seize it.
Anonymous in the crowd,
accountable to the law.
Proven team
OTCP is built by the people who shipped regulated identity infrastructure that banks and fintechs run in production today.
The clock is running
The agentic economy is being wired together right now. The defaults set this year will harden into the assumptions everyone builds on for the next decade. It can be rooted in verified, accountable, privacy-preserving human authority, and it should belong to everyone.
