Wax Seal
About
Cryptographic identity verification for AI agents — verify on-chain seals, validate Ed25519 signatures, and gate high-risk actions with human-signed approvals.
Explore
- Ed25519 keypair minted on-chain (Base, Ethereum, BNB Chain)
- Look up any WaxSeal by 64-character hex fingerprint
- Verify Ed25519 signatures against a WaxSeal
- Verify human-signed approval tokens
- Sign content with your WaxSeal key (requires key)
- Create signed approval tokens for agents (requires key)
Setting up with Highlight
This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:
- Download and install Highlight from highlightai.com/download
- Navigate to the plugins tab and select "Add Custom Plugin"
-
Configure the plugin with the settings below
Plugin Name
Wax SealCommand (node, npx, python, etc.)Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
- Enable "Start Automatically" if you want the plugin to start when Highlight launches
From the repository
WAXSEAL_PRIVATE_KEY_PEM is only required for waxseal.document.sign and waxseal.approval.create. Verify-only tools work with no environment variables.
Get your seal at waxseal.id/create.
waxseal.info
Returns an overview of the WaxSeal cryptographic trust infrastructure platform — what it is, the 11 trust layers it covers, available tiers, and how to use these MCP tools. Call this first if you are unfamiliar with WaxSeal.
waxseal.identity.verify
Look up a WaxSeal cryptographic identity by its 64-character hex fingerprint. Returns on-chain status, display name, chain, owner wallet, lifecycle status, and the public key. Works for any minted WaxSeal on Ethereum, Base, or BNB Chain.
waxseal.document.sign
Sign a document or message with the user's WaxSeal Ed25519 private key. Requires WAXSEAL_PRIVATE_KEY_PEM (inline PEM) or WAXSEAL_KEY_FILE (path to PEM file) to be set. Returns the fingerprint, SHA-256 content hash, and base64 Ed25519 signature — verifiable by anyone using waxseal.signature.verify.
waxseal.signature.verify
Verify an Ed25519 signature produced by waxseal.document.sign (or any WaxSeal-compatible signer). Fetches the public key for the fingerprint from the WaxSeal network, then verifies locally. The seal must be minted on-chain for verification to succeed.
waxseal.approval.create
Create a signed approval token that proves a human explicitly authorized a specific AI agent action. The token encodes the action, context, expiry, and is signed with the user's WaxSeal key. Pass the token to the AI agent — it calls waxseal.approval.verify before executing. Requires WAXSEAL_PRIVATE_KEY_PEM (inline PEM) or WAXSEAL_KEY_FILE (path to PEM file).
waxseal.approval.verify
Verify a WaxSeal approval token before an AI agent executes a high-risk or irreversible action. Checks the cryptographic signature, expiry, and optionally confirms the signer's fingerprint. Returns valid: true only when the token is authentic, unexpired, and the signer is on-chain.
| Tool | Description |
|---|---|
| waxseal.info | Overview of the platform — call this first |
| waxseal.identity.verify | Look up any WaxSeal by 64-char hex fingerprint |
| waxseal.signature.verify | Verify an Ed25519 signature against a WaxSeal |
| waxseal.approval.verify | Verify a human-signed approval token |
| waxseal.document.sign | Sign content with your WaxSeal key (requires key) |
| waxseal.approval.create | Create a signed approval token for an agent (requires key) |
The first four tools require no configuration — anyone can verify a seal or signature without a key.
Claude Desktop / Cursor
Paste into your MCP client config file to install this server.
{
"mcpServers": {
"wax seal": {
"waxseal": {
"command": "npx",
"args": [
"-y",
"@waxseal/mcp"
],
"env": {
"WAXSEAL_PRIVATE_KEY_PEM": "<your-ed25519-private-key-pem>"
}
}
}
}
}McpServers
{
"waxseal": {
"command": "npx",
"args": [
"-y",
"@waxseal/mcp"
],
"env": {
"WAXSEAL_PRIVATE_KEY_PEM": "<your-ed25519-private-key-pem>"
}
}
}Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.
