How does IdentaBar verify AI agent identities?

IdentaBar detects meta/link tags on visited pages or queries a domain's well-known path for agent.json records. It then fetches attestation credentials from creduent.idevsec.com and verifies the Ed25519 signatures locally using the native Web Crypto API.

Does IdentaBar track my browsing history?

No. IdentaBar does not collect, store, or transmit any user browsing data, cookies, or personal identifiers. All cryptographic signature verification runs completely client-side in the browser.

PRODUCT / CLIENT-SIDE / EXTENSION

IdentaBar.
AI Trust in Your Browser & Editor.

A secure browser extension and VS Code plugin that dynamically scan web pages and workspace directories for Creduent AI agent declarations. Instantly resolve attestation certificates and verify signatures locally to expose verified, expired, or revoked identities.

SOURCE CODE & ZIPdownload PRIVACY POLICYpolicy

BROWSER EXTENSION (MV3)

VS CODE EXTENSION (.VSIX)

LOCAL CRYPTO HANDSHAKE

lockhttps://cyberhavox.xyz

★

IDENTABAR // VERIFIED IDENTITY

v1.0.0

★

TRUSTED IDENTITY

ENTERPRISE LEVEL

Highest level of trust. The agent belongs to a verified enterprise-tier organization with formal compliance audits and a clean security record.

AGENT ID

agent://cyberhavox.xyz/sentinel-prime

OWNER

CyberHavox Inc.

CAPABILITIES

task_executionfinancial_transactioncode_write

VERIFIER: LOCAL WEB CRYPTOverified by idevsec

NEW RELEASE / VS CODE CLIENT

IdentaBar for VS Code.
Zero-Trust Editor Protection.

Secure your development workflow by scanning workspace directories in real-time. IdentaBar intercepts task execution to prevent rogue or unverified agents from running code in your local environment.

IDEs Support: VS Code & VSCodium

VS Marketplaceopen_in_new Open VSX Registryopen_in_new

01.

Zero-Trust Task Gating

Blocks execution of VS Code tasks (e.g. build, deploy, run) if unverified or revoked agent keys are detected in the active workspace configurations.

02.

Real-Time Directory Watcher

Listens to workspace file events in real-time. Modifying, creating, or deleting agent.json instantly re-verifies your system credentials.

03.

Premium Sidebar Explorer

A fully integrated tree explorer panel showing clean agent namespaces, collapsible capabilities, verified owners, domains, and certificate details.

VS CODE / AGENT EXPLORER

ACTIVE PROTECT

verifiedidevsec/stewardIDevSec • TRUSTED

verifiedSTATUS:TRUSTED

corporate_fareOWNER:IDevSec

publicDOMAIN:idevsec.com

cloudENDPOINT:https://idevsec.com

tagCAPABILITIES (3)

informational

faq_resolution

attestation_demos

gpp_badTask Execution Gated

Build task aborted. Reason: Active unverified agent key `agent://unknown-node.com/rogue-bot` detected in workspace. Strict enforcement policy enabled.

Local Verification Architecture
// Lightweight, Secure, and Private.

shield

Local Cryptography

No verification is executed on cloud servers. The extension pulls attestation documents and validates signatures locally via the browser's native Web Crypto API (crypto.subtle).

history_toggle_off

Ephemeral Caching

Maintains an in-memory resolution cache mapping domains to resolved identities within the service worker runtime. Zero telemetry, tracking, or persistent database writes.

code

JCS Canonicalization

Implements RFC 8785 JSON Canonicalization Scheme directly inside the browser client, ensuring data structure integrity prior to cryptographic validation.

terminal

Verify Playground

A built-in developer console panel loaded into DevTools. Allows builders to test custom payloads, verify signatures, clear logs, and audit handshake packets.

FAQ // FREQUENTLY ASKED QUESTIONS

Developer Questions.

OPEN-SOURCE ENGINE

Build Secure
Agent Identites.

IdentaBar is licensed under Apache 2.0.
Review the specification or request custom setups.

ABOUT CREDUENT PROTOCOL

REQUEST INTEGRATION

IdentaBar.AI Trust in Your Browser & Editor.