People and AI agents hold their own keys and sign in with a signature instead of a password. Know which agent is acting, and on whose authority.
Any entity can publish tools your agents use. No identity verification required.
10,000 fake identities cost nothing. Community trust metrics are meaningless.
AI-generated apps ship with minimal oversight. Auth is the first thing cut.
Trusted by teams building with Sigma Auth
How It Works
Generate a cryptographic keypair. Your private key never leaves your device.
Attest your identity on-chain. Every action is cryptographically attributable.
Apps and agents verify your identity through standard OAuth 2.0. No passwords, no secrets on servers.
AI tools authenticate through the same OAuth 2.0 flow your apps already use.
Encrypted backup lets you authenticate from any device with just your password.
Sigma turns verified account facts into credentials held by your wallet. You choose what to prove, when to prove it, and who receives the proof.
Before issuance, Sigma checks source evidence and signs the result. Your BRC-100 wallet receives the credential and decides when to present it.
Present an attestation that Sigma verified a linked social account, email address, or phone number.
Present an organization and role that Sigma verified for the credential's stated time period.
Present an attestation that Sigma verified app ownership or specific domain control at issuance.
Share only the credential fields a verifier asks for. Other fields stay undisclosed.
A credential attests to verified facts. It does not authorize an app or agent to act for you. Delegation requires separate, explicit, scoped authorization.
Encrypted Backup
Your keys, encrypted and portable. Use your identity from any device.
Sign in from any device with your password
Your password encrypts your keys
Completely optional feature
Core Principles
Cryptographic identity solves problems that passwords and API keys cannot.
Every skill, tool, and plugin has a verified author through unforgeable cryptographic attestation. When your AI agent installs a skill, you know exactly who built it.
Know who built what your AI agents use.
Thousands of fake identities collapse trust metrics. Sigma Auth makes Sybil attacks economically infeasible -- each identity is tied to real cryptographic ownership.
One key, one identity, verifiable forever.
AI coding tools ship fast but cut security corners. The Better Auth plugin is the drop-in auth layer that works by default. Security your agents cannot accidentally delete.
Authentication that survives the vibe.
NFT-based subscriptions gate access to premium tools and verified skills. Creators earn sustainable income, proof of access lives on-chain, and subscriptions are tradeable.
Gate access with proof, not promises.
ClawNet demonstrates how Sigma Auth enables trusted agent interactions. Every post, endorsement, and skill deployment is cryptographically signed and attributable.
The web of trust, verified.
Learn
Know Your Agent (KYA) is verifiable identity for software that acts on its own behalf.
Read more
Self sovereign identity is a design position. Decentralized identifiers are a W3C standard.
Read more
Keycloak, Ory, SuperTokens, Authentik, Clerk and Sigma Auth compared against Auth0 on license, hosting, pricing model, and wallet support.
Read more
Integration
Standard OAuth 2.0. Drop in the Better Auth plugin or call the API directly.
Install the Better Auth plugin
Add @sigma-auth/better-auth-plugin with one command
User authenticates with cryptographic keys
Users sign with Bitcoin keys or restore from encrypted backup
Exchange code for access token
Standard OAuth 2.0 authorization code flow
Verify identity in your app or agent
Bearer token in Authorization header. Works with agents, APIs, and web apps.