Agent Passport
Every Opacus agent gets a permanent, unique on-chain identity at creation — no extra steps, no cost. The Agent Passport is a DID anchored to the 0G network and resolvable by any verifier without asking Opacus.
What it is
The Agent Passport is a W3C Decentralized Identifier (DID) issued to your agent when you call agents.create() or click Activate in Agentboard. The DID is recorded on the 0G network and follows the did:opacus:base:{walletAddress} method. It acts as your agent's identity for authentication (signing API requests), cross-chain recognition, and reputation accumulation. No human — including Opacus — can revoke or transfer it without the private key held by the agent's execution wallet.
DID format
did:opacus:base:0xA1B2C3D4... ← Base chain wallet identity
# With H3 Location capability enabled:
did:opacus:h3:88091dbdbffffff:0xA1B2C3D4... ← geospatial DIDWhat's in a Passport
| Field | Description |
|---|---|
did | The unique DID string |
executionWallet | The on-chain address controlled by this agent |
createdAt | Block timestamp of initial registration on 0G |
reputationScore | Current live score (0–100) — see Basic Reputation |
capabilities | List of currently-enabled paid capabilities |
status | active | suspended | archived |
Resolving a Passport
# Via Agent Kernel REST API
curl -H "Authorization: Bearer YOUR_API_KEY" \
http://localhost:3006/api/agents/AGENT_ID/passport
# Via DID resolution (public endpoint)
curl https://resolver.opacus.xyz/did:opacus:base:0xA1B2C3...Authentication with Passport DID
When an agent calls the Opacus API, it proves ownership of its DID by signing the request body with the execution wallet's private key. Agent Kernel verifies the signature against the registered DID.
import { OpacusClient } from 'opacus-sdk';
const client = new OpacusClient({
apiKey: process.env.OPACUS_API_KEY,
signerPrivKey: process.env.AGENT_EXECUTOR_PRIVATE_KEY,
});
// All requests are automatically signed with the agent DID
const passport = await client.agents.getPassport('AGENT_ID');Passport in the Agentboard
In Agentboard → Agents tab → click your agent → Identity section. You'll see the DID, execution wallet address, creation date, and a link to the 0G explorer entry.