Spec / Surfaces

Surface verification

Surfaces are the places an AI shows up — domains, bots, social profiles, phone numbers. AI Identity proves that the entity behind a registered identity actually controls a given surface.

Web surfaces

  • dns_txtDNS TXT record

    Add _aiidentity TXT record to your domain

  • websiteWebsite meta tag

    Add <meta name='aiidentity-verify'> to your homepage

  • emailEmail magic link

    We email a confirmation link

Telegram

  • telegram_botTelegram bot

    Paste the token in your bot's BotFather description, then we read it via Bot API getChat

  • telegram_user_dmTelegram user (DM flow)

    From your Telegram account, DM our verifier bot the token. We match sender username and verify automatically.

  • telegram_user_bioTelegram user (bio)

    Add the token to your bio, then we read your public bio via Bot API.

  • telegram_gatewayPhone via Telegram Gateway

    We send a 6-digit code via Telegram (free, no SMS required) to confirm a phone number.

Other surfaces

  • whatsappWhatsApp Business profile (phone)

    Add the token to your business profile 'About' field; we read it via WA Business Cloud API. Surface format: wa:+{e164}.

  • whatsapp_usernameWhatsApp username (2026)

    Same flow as phone-bound, but the surface registers as wa:@handle so your phone number stays private. Available since WhatsApp's 2026 username rollout.

  • discordDiscord guild / user

    Token in guild description or user About Me; read via Discord API.

  • xX (Twitter) bio

    Token in your bio; we read via X API v2.

  • phonePhone (SMS OTP)

    Standard SMS one-time code (Twilio Verify, fallback to Telegram Gateway).

What gets recorded

Every successful verification is written to the public registry as part of the identity record, with the surface type, target (e.g. example.com or @yourbot), and timestamp. Verifications never expose the operator behind the identity — only the proven surfaces.

When a Passport is issued, the proven surfaces are embedded as the surfaces[]claim, so any verifier can cryptographically check "does this Passport say it controls @yourbot? Yes."

Trust impact

Each verified surface adds to the identity's trust score. The first verification also auto-promotes the identity from issued to identity_verified.