Privacy-first digital identity
Verifiable credentials, selective disclosure, and zero-knowledge predicates —
built on Midnight. Drop Owl ID into your product in five minutes.
What you get
Selective disclosure
Reveal only the attributes you pick. Hidden fields stay hashed under a salted Merkle root signed by the issuer.
Zero-knowledge predicates
Prove "age ≥ 18", "nationality ∈ EU set", or "KYC tier ≥ 2" without revealing the underlying value. Groth16 over BLS12-381.
WebAuthn passkeys
ECDSA P-256 signing inside the secure enclave. Private keys never touch JavaScript or your servers.
Live revocation registry
Revoke, suspend, reactivate. Verifiers receive push events over WebSocket — invalidate cached results instantly.
Plug-in IdP issuance
DigiD, BankID, OIDC, SAML, and Didit KYC out of the box. Bring your own provider via the form, OIDC, or webhook flows.
On-chain trust anchor
Issuer keys, revocations, and identity commitments published on Midnight. No central directory, no key escrow.
Where to start
Next steps: Quickstart · SDK reference · How Owl ID works