Privacy-first digital identity
Verifiable credentials, selective disclosure, and zero-knowledge predicates —
built on Midnight. Drop Owl ID into your product in five minutes.
What you get
Selective disclosure
Reveal only the attributes you pick. Hidden claims stay as salted SHA-256 hashes in the issuer-signed SD-JWT VC.
Zero-knowledge predicates
Prove "age ≥ 18", "nationality ∈ EU set", or "KYC tier ≥ 2" without revealing the underlying value. Proven on the holder's device, verified and attested on Midnight.
WebAuthn passkeys
The passkey PRF unwraps a wallet-held Ed25519 or P-256 key that signs every presentation. Keys never leave the device or reach your servers.
Live revocation registry
Revoke, suspend, reactivate. Verifiers receive push events over WebSocket — invalidate cached results instantly.
Plug-in IdP issuance
DigiD, BankID, OIDC, SAML, and Didit KYC out of the box. Bring your own provider via the form, OIDC, or webhook flows.
On-chain trust anchor
Issuer keys, revocations, and identity commitments published on Midnight. No central directory, no key escrow.
Where to start
Next steps: Quickstart · SDK reference · How Owl ID works