Demos
Everything below runs on a live OTCP demo instance: an issuer, a verifier, a status service, a Trust Fabric and a public directory, plus demo businesses built on top of them. Real services and real cryptography, demo-grade data. Some scenarios need the OTCP wallet on a phone; the rest run in your browser.
Play a scenario
Fictional businesses, live rails. Each one exercises a different part of the trust layer.
A live kiosk asking one question: over 18? Scan its QR with the OTCP wallet, share one signed "yes", and watch the screen go green. No birthday, no name, no document. Revoke trust in the issuer on the fabric and the same wallet goes red in under two minutes.
An 18+ venue that never sees your ID document. Its landing page shows how an age-gated business fronts the kiosk, and what its door learns: one boolean.
Open an account with the verified identity in your wallet: your name, a completed KYC and a sanctions screening from the last 30 days, and nothing else. Its second factor is the wallet's built-in authenticator, the Auth tab, working like any authenticator app.
A workspace with no password to steal. Signing in is a challenge your wallet signs with a key only your fingerprint can release — scan a QR from a computer, or tap once on the phone. Sign in twice and it knows you, having stored no password, no email and nothing another site could recognise.
A P2P transfer app on the demo fabric. Small transfers move with a lightweight check; over the threshold, the recipient proves an identified account first. Both legs run against the live verifier, on one phone.
A click-through of the consumer wallet: credential home, OTCP ID, selective-disclosure shutters, and issuing mandates to AI agents. Built on the OTCP design system.
See how a human signs scoped, revocable authority to an AI agent, spend caps, step-up approval, and sub-agent chains the verifier walks end to end.
Under the hood
The same endpoints the demo businesses call, open for you to inspect and integrate against.
Play the merchant. Pick exactly which claims to request, "Over 18" with no date of birth, or selected identity fields, then scan the QR with a wallet and watch a real OpenID4VP presentation verify in seconds. Selective disclosure, end to end.
Every issuer and verifier on the demo instance, as the Trust Fabric publishes them: accreditations, intended uses, trust marks. A verifier trusts by resolving these statements, never a list on a page.
The OID4VCI issuer that turns a completed KYC into a reusable OTCP ID, issued as an SD-JWT VC bound to the holder's device key.
The IETF Token Status List that lets any verifier check, in real time, whether a credential, or a delegation, is still valid.
The public draft of the delegation credential profile: authority classes, attenuation, revocation cascade, and the verification walk.
These are real services, not mockups. The issuer, verifier, status service, Trust Fabric, blueprints service, console and demo apps run on Google Cloud Run with managed TLS, each on its own subdomain, so you can integrate against them directly. The businesses are fictional and the data is demo-grade; harden before production use.
