🧠 MCP PID Wallet Verifier

A lightweight and AI-friendly MCP server that allows any AI agent or MCP-compatible assistant to initiate and verify a PID (Personal Identity Data) credential presentation via OIDC4VP.

This server is designed to support secure, QR-based wallet interactions and can be used with agents like Cline, OpenAI’s GPTs (via custom tools), or any custom client following the MCP protocol.

🚀 Features

• ✅ Supports OIDC4VP Draft-13 with `direct_post` response mode
• ✅ Two-step MCP REST tools for credential presentation
• ✅ Generates QR codes and openid-vc:// deep links
• ✅ Receives SD-JWT-based credentials from EUDI-compatible wallets
• ✅ Stateless via Redis session storage
• ✅ Fully MCP-compliant via `.well-known/mcp/tools`

🔧 Tools Exposed (MCP REST)

`1. initiate_pid_request`

Start an OIDC4VP presentation flow. Returns a QR code and session ID.

POST `https://verifier.wallet-provider.com/tools/initiate_pid_request`

Response

{
  "status": "pending",
  "instructions": "Scan this QR code with your wallet to present a credential.",
  "session_id": "f1203ea7-d5...",
  "presentation_url": "openid-vc://?client_id=...",
  "qr_code_base64": "data:image/png;base64,..."
}

`2. check_pid_result`

Poll the status of the credential presentation.

POST `https://verifier.wallet-provider.com/tools/check_pid_result`

Request

{
  "session_id": "f1203ea7-d5..."
}

Possible Responses

• Pending:

{ "status": "pending" }

• Verified:

{
  "status": "verified",
  "verified_credential": {
    "given_name": "Jean",
    "family_name": "Dupont",
    "birth_date": "1975-06-23"
  }
}

• Error:

{ 
  "status": "error",
  "error_description": "signature failed"
}

🧠 Use Case

This server enables an AI agent to:

1. Ask a user to present their digital ID (PID)

2. Show them a scannable QR code

3. Wait for wallet response via OIDC4VP

4. Extract and use verified attributes (e.g., name, birth date)

Perfect for use in:

• Identity verification flows
• Onboarding
• Compliance & KYC automation
• Government-grade AI applications

🛠️ Tech Stack

• Python + Flask
• Redis for session handling
• `jwcrypto` for JWT signing/verification
• `qrcode` for base64-encoded QR image generation
• Compatible with EUDI-compliant wallets and SD-JWT

📄 MCP Tool Discovery

GET `https://verifier.wallet-provider.com/.well-known/mcp/tools`

Returns a JSON manifest describing available tools, input schema, and descriptions.

🧪 Demo Agent Available

You can test this server using a local or scripted agent that calls:

• `https://verifier.wallet-provider/tools/initiate_pid_request`
• `https://verifier.wallet-provider.com/tools/check_pid_result`

Or use a Custom GPT / Claude with support for MCP tools.

🛡️ Security Notes

• Temporary data is stored with expiration (`setex`)
• Signature verification via `verif_token()`
• Expiration (`exp`) and nonce handling included
• Designed for secure, audit-friendly digital identity operations

📬 Contact

Created by Talao

Maintainer: thierry.thevenet@talao.io

License: Apache V2.0