Class Identity

Initializes a new Identity from a BIP39 mnemonic seed phrase or raw seed bytes.

const seed = await get32ByteSeedFromMnemonic('abandon abandon ... art');
const identity = await Identity.fromSeed(seed);
Copy

Derives a new, cryptographically isolated Handle for a specific context.

Each Handle is derived deterministically. The same name will always produce the same Handle from the same Identity, but different names produce completely unrelated keys.

const handle = await identity.deriveHandle('station-001', {
  displayName: 'Berlin Station #001'
});
Copy

Atomically derives a SubHandle from this Identity by its full path.

This method performs the equivalent of:

const handle = await identity.deriveHandle(handleName);
const sub = await handle.deriveSubHandle(subName);
Copy

but in a single call, without exposing the intermediate Handle.

It is the recommended entry point for stateless session verification, because the server only needs the Identity and the path from the token.

The resulting SubHandle is cryptographically identical to the one produced by Handle.deriveSubHandle(subName) on the same Identity.

// Server-side stateless verification
const sub = await identity.deriveSubHandle('station-001', 'connector-1');
const publicKey = sub.getPublicKey();
Copy

Issues an attestation binding a derived Handle key to its name and grant. The subject public key is always derived internally — it is impossible to attest a foreign key, and the resulting subjectId always matches the handle reconstructed via Identity.deriveSubHandle.

const A = await identity.attestHandle('station-001', {
  audiences: ['ev-app.com'],
  scopes: ['charge:start', 'charge:stop', 'charge:status'],
  maxSessionTtl: 7200,
  subNamePatterns: ['connector-*', 'meter-*'],
});
Copy

Retrieves the public key of the root Identity.