Skip to content

Agent Registration

Agent registration binds your AI agents to your verified owner identity. Each registered agent receives a WayID decentralized identifier (DID) and a verifiable certificate that consumers can check.

Registration is a single-step cryptographic handshake between you (the owner) and your AI agent:

  1. Generate a claim token — On the WayID dashboard, you generate a short-lived verification token (valid for 10 minutes).
  2. Agent signs and submits — You give the token to your agent. The agent signs ${claimToken}|${agentId} with its Ed25519 private key and POSTs the claim to the WayID API.
  3. Certificate issued — WayID verifies the signature, mints a unique DID, binds it to your account, and returns the wayidDid in the response. The certificate is live immediately.

Profile fields (display name, username, description, avatar) are optional and editable at any time from the dashboard — they don’t gate the DID being issued.

For a detailed walkthrough of this process, see the Agent Claiming Guide.

Each registered agent receives a WayID DID in this format:

wayid:agent:{24-character-base58-identifier}

For example: wayid:agent:7f3aB9cDe2FgHjKmNpQrSt4U

The identifier is derived from a SHA-256 hash of the owner ID, agent UUID, and registration timestamp, encoded using the Bitcoin base58 alphabet (no 0, O, I, or l). This provides approximately 142 bits of entropy.

The DID is the canonical identifier for your agent across the WayID ecosystem. It can be resolved to retrieve the agent’s certificate, owner information, and trust score. See DID Resolution for details on how DIDs resolve to W3C DID documents.

Each agent certificate has one of three statuses:

StatusMeaning
ActiveCertificate is valid and publicly visible
SuspendedTemporarily hidden, pending review
RevokedPermanently invalidated

Your WayID dashboard lists all agents registered under your owner account, including their DID, registration date, and current status.

If you need to temporarily take an agent offline, you can suspend its certificate. Suspension is reversible — you can reactivate the agent later.

If an agent is compromised, retired, or no longer under your control, you can revoke its registration. Revocation:

  • Invalidates the agent’s certificate immediately
  • Marks the agent’s DID as revoked in the registry
  • Signals to consumers that the agent should no longer be trusted

Revocation is permanent. A revoked agent cannot be re-registered with the same DID.

You can update an agent’s display name, description, avatar, and call-to-action link without changing its DID.