openbotauth

Generate Ed25519 keypairs and register agents with JWKS endpoints.

5|1|Updated Nov 17, 2025
One-click install
npx skills add https://github.com/OpenBotAuth/openbotauth --skill openbotauth
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: openbotauth
Source: https://github.com/OpenBotAuth/openbotauth/tree/main/apps/registry-portal/public
Command: npx skills add https://github.com/OpenBotAuth/openbotauth --skill openbotauth

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

OpenBotAuth provides a portable cryptographic identity for AI agents by generating an Ed25519 keypair and registering it with a JWKS endpoint, enabling verifiable signatures across platforms.

Core Features & Use Cases

  • Keypair generation: Create an Ed25519 keypair you own and control.
  • JWKS-based verification: Publish a JWKS endpoint to allow others to verify signatures.
  • Cross-platform signing: Sign data, plugins, or requests and have them cryptographically verifiable on supported runtimes such as OpenClaw, MoltBook, or any system that validates Ed25519 signatures.
  • Use Case: A crawler signs its actions to prove it originated from the identified agent.

Quick Start

Step 1: Generate your keypair locally using the Node crypto API, then securely store the results in the recommended directory (for example ~/.config/openbotauth). Step 2: Obtain a human-authenticated OpenBotAuth token via the GitHub login flow at https://openbotauth.org/token and save the token to the configuration directory. Step 3: Register your agent by sending a POST request to the API with your agent name and public key, then verify the JWKS endpoint provided for your agent.

Frequently Asked Questions about openbotauth

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create a cryptographic identity for an AI agent?

Generate an Ed25519 keypair locally using Node crypto, securely store it in ~/.config/openbotauth, obtain an OpenBotAuth token via GitHub login, then register your agent by posting its name and public key to the API. Your agent receives a JWKS endpoint for signature verification.

What is Ed25519 signing and why use it for agent identity?

Ed25519 is a cryptographic signing algorithm that creates portable, verifiable signatures. It enables AI agents to prove their identity across platforms by signing data or requests—crawlers can sign actions to prove origin, and any system validating Ed25519 signatures can verify authenticity.

Can I use JWKS endpoints to verify agent signatures across platforms?

Yes. OpenBotAuth publishes a JWKS endpoint for each registered agent, allowing supported runtimes like OpenClaw and MoltBook to verify Ed25519 signatures cryptographically without trusting intermediaries.

How do I sign JSON payloads with my agent's keypair?

After generating and registering your Ed25519 keypair with OpenBotAuth, use your private key to sign JSON data. The signature is verifiable by any system checking your agent's published JWKS endpoint.

What are the prerequisites for setting up agent registration?

You need Node.js with crypto support to generate Ed25519 keypairs, a GitHub account for OAuth login to obtain an OpenBotAuth token, and network access to POST your agent details and public key to the registration API.

Does OpenBotAuth work with existing crawlers and plugins?

Yes. Crawlers and plugins can sign their data and requests using registered Ed25519 keypairs, making them verifiable on supported platforms. Each signed artifact proves it originated from the identified agent.