Xident MCP servers and agent skill

Tools for building — and running — Xident age and identity verification from an AI agent.

Quick start

Claude Code

/plugin marketplace add xident-io/mcp
/plugin install xident@xident-io

Any MCP client

{
  "mcpServers": {
    "xident-dev": {
      "command": "npx",
      "args": ["-y", "@xident/mcp-dev"],
      "env": { "XIDENT_API_KEY": "sk_test_your_sandbox_key" }
    }
  }
}

XIDENT_API_KEY is optional. Without it you still get xident_search_docs, xident_get_endpoint, xident_verify_webhook_signature, and xident_explain_session — enough to write a correct integration.

Related MCP server: Agent Identity MCP Server

Tools

* xident_explain_session needs a key only when you pass a token instead of a reason code.

What these servers deliberately cannot do

No tool deletes anything, writes to a fraud blacklist, or changes billing. Specifically excluded: DELETE /verify/v1/2fa/users/:id (GDPR hard delete), all blacklist writes, and any key or billing mutation. This is enforced by a test, not a convention.

xident_simulate_webhook refuses any target that is not localhost, so it cannot be used to make requests on someone else's behalf.

Running agents in production

@xident/mcp is a remote MCP server. A tenant authorises a client through Xident's consent screen, and the client calls the server with the resulting bearer token. Tools outside the token's scopes are not advertised.

docker run -p 8080:8080 \
  -e XIDENT_MCP_RESOURCE_URL=https://mcp.yourdomain.com \
  ghcr.io/xident-io/mcp

See packages/mcp for the full contract.

Stability

Tool names and input schemas are additive-only, pinned by a golden test. A rename is a broken promise, not a snapshot to regenerate.

Development

pnpm install
pnpm -r build
pnpm -r test

Licence

MIT