Secure AI Agent Skill for Human Verification with WebAuthn

Secure AI Agent Skill for Human Verification with WebAuthn

This Secure AI Agent Skill facilitates the process of human verification through WebAuthn, ensuring that tasks requiring a qualified human intervention are authenticated by obtaining cryptographic Proof of Human. This skill is specifically designed for use within chat environments where WebAuthn cannot be run in an integrated setting, utilizing a secure chat bridge method to produce required attestations.

What this skill does

• Posts a request to initiate the attestation process via the WebAuthn-backed method.
• Provides a human participant with an approve_url to open in a Chrome browser, facilitating the attestation process.
• Polls the system to monitor the completion status of the attestation.
• Generates a certificate_url once the attestation is complete, serving as proof of human verification.

Who it is for

Developers and teams utilizing AI coding agents such as Claude Code, Cursor, and Codex, especially those requiring secure and verified human participation in workflows are best suited to integrate this skill into their processes.

Use cases

• Securing the execution of critical actions that require human validation in AI-driven processes.
• Ensuring regulatory compliance by obtaining documented proof of human intervention for audit trails.
• Binding approvals or decision-making processes in environments where human input is crucial.

Technical details

• Operates via a Chat bridge to manage the attestation process in cases where in-card WebAuthn cannot be employed.
• Relies on a secure networking structure to communicate seamlessly with the WebAuthn authentication service through the provided APP_BASE_URL: https://bridge.trust.sanctifai.com.
• Does not require the agent to handle any TRUST_API_KEY, ensuring a secure delegation of the authentication responsibility to the hosted bridge.
• Supports self-hosting with custom allowlisted origins if required.

For authorised security testing, defensive research, and educational use only.

Source & Licence

This package is built on open-source work published by sanctifai (sanctifai/skills) and distributed under Apache-2.0. The original licence text and copyright notice are included in your download.

Personal and commercial use, modification and redistribution are permitted under the Apache License 2.0, which also includes an express patent grant. Attribution and any NOTICE file must be retained.

Your purchase covers curation, licence verification, packaging, documentation and instant delivery. It does not grant exclusive rights to the underlying open-source code, which remains available under its original licence.

Delivery & Support

• Delivery: instant — a secure download link is emailed to you as soon as payment is confirmed.
• Format: ZIP archive containing the skill files, documentation and the original licence.
• Support: support@mcpcart.com — we aim to reply within 2 business days.
• Updates: updates are included only where stated on this page.

Refunds

This is a digital product delivered immediately after purchase. By completing your order you request immediate delivery and acknowledge that, once the download has been accessed, the statutory right to cancel no longer applies to the extent permitted by law. Refund requests are handled in accordance with our published Refund Policy.

Claude, Codex, Gemini and Cursor are trademarks of their respective owners. MCP Cart is an independent marketplace and is not affiliated with, endorsed by, or sponsored by any of them. Compatibility references describe interoperability only.