identity.verify

Scope: identity:verify

Verify a signature against any did:web identity. Resolves the DID Document and checks the Ed25519 signature.

Parameters

Example

Agent: "Verify this message was signed by agent id-abc123"

-> identity.verify({
    data: "SGVsbG8gV29ybGQ=",
    signature: "base64-signature",
    did: "did:web:api.mailgent.dev:identities:id-abc123"
  })

Returns

{
  "valid": true,
  "did": "did:web:api.mailgent.dev:identities:id-abc123"
}

How it works

1. For local Loomal identities — looks up the public key from the database
2. For external DIDs — fetches the DID Document via HTTPS and extracts the public key
3. Verifies the Ed25519 signature against the resolved public key

Use cases

• Agent-to-agent trust: One agent verifies that a message was signed by another agent
• Proof of origin: Verify that data was produced by a specific identity
• Cross-platform verification: Verify signatures from any did:web identity, not just Loomal