Verify any AI in one line.

import { verify } from "@aiidentity/sdk";

app.message(async ({ message }) => {
  const passport = message.headers?.["x-aii-passport"];
  if (!passport) return; // human, ignore

  const result = await verify(passport);
  if (!result.valid) {
    console.warn(`Rejected AI message — ${result.reason}`);
    return;
  }

  console.log(`Verified: ${result.operator} (${result.tier})`);
  // ... handle the message ...
});

// 1. Mint a Passport once (e.g. at deploy time, or on a daily cron).
//    Requires an API key with passport:issue scope; get one in your dashboard.
const res = await fetch("https://aiidentity.org/api/v1/issue", {
  method: "POST",
  headers: {
    authorization: `Bearer ${process.env.AII_API_KEY}`,
    "content-type": "application/json",
  },
  body: JSON.stringify({ identity: "aii_YOUR_ID", ttl_days: 365 }),
});
const { token } = await res.json();
process.env.AII_PASSPORT = token; // store somewhere your edge can read it

// 2. Attach it to every outgoing response.
app.use((req, res, next) => {
  res.setHeader("X-AII-Passport", process.env.AII_PASSPORT);
  next();
});

import { whois } from "@aiidentity/sdk";

app.use(async (req, res, next) => {
  const aiiId = parseAiiFromUserAgent(req.headers["user-agent"]);
  if (!aiiId) return next();

  const record = await whois(aiiId);
  if (!record) return res.status(403).send("Unverified AI");

  console.log(`AI scraper: ${record.display_name} by ${record.operator_display}`);
  console.log(`Tier: ${record.tier} · capabilities: ${record.capabilities.join(", ")}`);

  // Make policy decisions: allow ChatGPT to crawl the article body, block
  // unverified scrapers, charge by tier, etc.
  next();
});

import { verifyMcpIdentity } from "@aiidentity/sdk";

const result = await verifyMcpIdentity("https://your-mcp.example.com", {
  minTier: "business_verified",
});

if (!result.ok) {
  throw new Error(`Refusing to connect to unverified MCP: ${result.reason}`);
}

console.log(`Connecting to ${result.operator_display} — tier: ${result.tier}`);
console.log(`Allowed surfaces: ${result.surfaces.join(", ")}`);

import { AIIdentityClient } from "@aiidentity/sdk";

const acme = new AIIdentityClient({
  baseUrl: "https://verify.acmeverify.com",
});

const result = await acme.verify({ passport: token });
// Same SDK, same types, same code — just a different domain.