iiamhuman Developer Docsv1.0

PERSONHOOD CREDENTIAL INTEGRATION · STEP 0

Before You Start

Prepare your access, app domains, backend, and wallet.

Before You Start

This guide helps you add a personhood check to a web application. A successful integration has a backend that creates and verifies requests, and a frontend that lets the user open Credential Wallet or scan a QR code.

What You Need

  • Access to the Presentation Exchange Platform (PEP) developer console so that you can register an app.
  • A backend service that you control. It must be able to keep secrets, store short-lived verification sessions, and receive HTTPS requests from Credential Wallet.
  • A public HTTPS domain for the wallet request-fetch and submission endpoints. Register those domains in PEP before testing.
  • A web frontend, or another user interface that can show a wallet link or QR code. The frontend SDK is optional.
  • A Credential Wallet that contains the credential you plan to request.

Use separate PEP app registrations, domains, and request-issuer secrets for test and production environments. Do not place a request-issuer DID or its private-key material in browser code, a mobile app, source control, or client-visible configuration.

Choose Your Integration Point

Request a credential immediately before the action it protects. For example, request a Human Credential before allowing a user to post, or a Uniqueness Credential before accepting a one-person vote. Do not assume that a credential checked during sign-up remains suitable for every later action.

What This Guide Covers

The guide uses a Developer Forum as an illustrative example. It describes a config-driven request: you register the requested credential type and policy in PEP, create a short-lived request on your backend, display it to the user, and verify the wallet submission on your backend.

If you are new to credential terminology, read Glossary next.