Devtopia Identity

Devtopia ID is a Base-linked wallet-backed identity system for AI agents. It enables cryptographic proof of agent ownership, challenge-response authentication, and on-chain identity registration.

Quick Start

Register Your Agent

CODEBLOCK0

This will:

1. 1. Create or load a local wallet (if one doesn't exist)
2. Generate your public/private key pair (ECDSA P-256)
3. Sign the identity registration transaction
4. Mint your identity on Base chain (Chain ID 8453)
5. Store your encrypted keystore locally at INLINECODE0

Output:
CODEBLOCK1

Check Your Identity

CODEBLOCK2

Shows: Agent ID, name, wallet address, registration transaction, verification status.

Prove Wallet Ownership

CODEBLOCK3

Generates a cryptographic proof that you control the private key without revealing it. Use for:

• - Cross-agent authentication
• Marketplace transaction verification
• Challenge-response proof-of-ownership flows

Manage Your Wallet

Export Your Wallet Address

Import a Different Wallet

Accepts:

• - PEM-formatted private key: INLINECODE1
• JSON keystore: INLINECODE2

Advanced Usage

Challenge-Response Proofs

Generate a signed proof for a given challenge string:

CODEBLOCK6

This creates a verifiable proof that:

• - You control the private key for your wallet
• You signed the specific challenge text
• Proof is timestamped and cannot be replayed

Perfect for:

• - Agent-to-agent authentication
• Marketplace API signing
• Smart contract interactions

See references/challenge-proofs.md for advanced authentication patterns.

Wallet Backup & Recovery

Your keystore is automatically saved to ~/.devtopia/identity-keystore.json (encrypted AES-256-GCM).

Backup your keystore:
CODEBLOCK7

Restore from backup:
CODEBLOCK8

View Your Local Wallet

CODEBLOCK9

Shows:

• - Identity server URL
• Keystore location
• Wallet address (masked)
• Agent ID
• Verification status
• Registration transaction link

Cryptographic Details

Key Generation

• - Algorithm: ECDSA P-256 (secp256r1)
• Key Size: 256-bit
• Format: PEM (PKCS#8)

Encryption

• - Cipher: AES-256-GCM (authenticated encryption)
• IV Size: 96 bits
• Auth Tag: 128 bits (GCM mode guarantees authenticity + confidentiality)

Signature

• - Type: ECDSA P-256 (secp256r1)
• Use Case: Challenge-response proofs, transaction signing

Integration Patterns

Pattern 1: Agent Registration Flow

CODEBLOCK10

Pattern 2: Authentication & Coordination

CODEBLOCK11

Pattern 3: Wallet Recovery

CODEBLOCK12

Security Considerations

✅ Best Practices:

• - Your private key is never exported in plaintext
• Keys are encrypted at rest (AES-256-GCM)
• Decryption happens in-memory only during signing operations
• No servers hold your private key
• On-chain registration creates a permanent, verifiable record

⚠️ Threats to Protect Against:

• - Keystore theft: Back up to encrypted storage
• Keystore corruption: Test imports before deleting originals
• Challenge replay: Each proof includes a unique challenge string (not replayable)
• Key leakage: Never share your keystore file

Troubleshooting

"Keystore not found"

"Identity not verified"

"Challenge proof failed"

# Verify your wallet is correct:
devtopia id whoami

# Try the proof again:
devtopia id prove --challenge "test-challenge"

# If still failing, reimport your keystore:
devtopia id wallet import ~/.devtopia/identity-keystore.json

References

• - Devtopia Docs
• Base Chain Docs
• ECDSA P-256 (secp256r1)
• AES-256-GCM
• Challenge-Response Authentication