walt.id Identity for issuing, holding and verifying W3C Verifiable Credentials over open standards, self hosted with a web wallet.
walt.id Identity is an open source platform for decentralized identity and verifiable credentials. It provides an Issuer API, a Verifier API and a server side Wallet API, plus a browser web wallet, so you can issue, hold and verify W3C Verifiable Credentials using open standards including OID4VCI, OID4VP and Decentralized Identifiers.
The Issuer, Verifier and Wallet services are preinstalled and wired together behind a web wallet on port 80, with an end to end self test that proves the issue, hold and verify flow. On first boot every instance generates unique wallet signing keys and a unique administrator account written to a root only file, the wallet state lives on a dedicated data volume, and cloudimg provides 24/7 support.
Real screenshots taken while testing this image against its deployment guide.
This is a repackaged open source software product wherein additional charges apply for cloudimg support services.
Overview
walt.id Identity is an open source platform for decentralized identity and verifiable credentials. It gives you the building blocks to issue, hold and verify W3C Verifiable Credentials using open standards including OpenID for Verifiable Credential Issuance (OID4VCI), OpenID for Verifiable Presentations (OID4VP) and Decentralized Identifiers (DIDs). This image delivers the stack fully installed and wired together, so a complete issue, hold and verify flow is running within minutes of launch.
Application Stack
The platform runs as a set of pinned upstream containers managed by systemd: the Issuer API on port 7002 issues Verifiable Credentials to wallets over OID4VCI, the Verifier API on port 7003 requests and verifies Verifiable Presentations over OID4VP with configurable credential and presentation policies, and the Wallet API is a server side holder wallet that can receive, store and present credentials, backed by a local SQLite database. A web wallet user interface is served on port 80 through an nginx reverse proxy, so you can register, hold and present credentials from a browser. Docker Engine is installed from the official Docker package repository and every walt.id image is captured into the AMI, so instances start offline without pulling anything.
Dedicated Storage Tier
The Wallet API state, holding the wallet accounts, keys and stored credentials, lives on a separate, independently resizable data volume, so your holder data survives instance replacement and the wallet data tier can be grown without disturbing the rest of the instance.
Open Standards Identity
Every capability is exposed through clean HTTP APIs built on open standards: OID4VCI issuance, OID4VP verification, W3C Verifiable Credentials, Decentralized Identifiers and selective disclosure. Build issuers, verifiers, holder wallets and integrations against one consistent, standards based stack, and connect it to your own applications, wallets and trust frameworks.
Secure First Boot
On the first boot of your instance a one shot service generates unique wallet signing and encryption keys and a unique wallet administrator account, written to a file only the root user can read. No administrator, no shared secret and no default credential ships in the image; the Issuer and Verifier learn the instance public address on every boot so credential offers and presentation requests point at the right host without hand editing. The Wallet API is bound to loopback and reached through the web wallet on port 80.
Ready To Use
Browse to the instance on port 80 to open the web wallet and sign in with the generated administrator credentials, or register a new holder account. The Issuer API on port 7002 and the Verifier API on port 7003 are ready for your applications and integrations, and a built in end to end self test issues, holds and verifies a sample credential to prove the whole flow.
cloudimg Support
24/7 technical support by email and chat. Help with deployment, the Issuer, Verifier and Wallet APIs, OID4VC and DID configuration, credential and presentation policies, the web wallet, TLS and runtime tuning.
Use Cases
Issue and verify W3C Verifiable Credentials over open standards. Stand up a decentralized identity backend for your applications. Operate a server side holder wallet for automation and testing. Prototype and demonstrate reusable identity and credential flows. Build trust frameworks on OID4VC and DIDs.
walt.id is a trademark of its respective owner. All other product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.