Know who your agent is about to pay.

Verify an agent’s authorization on-chain before money moves. One read; no API, no intermediary.

3 verifiable agents · Pharos Atlantic Testnet · block 26,720,233

01 · Is this agent authorized?

live · pharos atlantic testnet

Check before it acts.

Choose a wallet and a capability. The answer comes from chain state, signed by the issuer.

This is the read an agent makes before sending a transaction.

isCapable · 1 rpc call

The result of isCapable appears here. One on-chain read, no SDK.

Every agent is a stranger
until you check.

Portable identity and verifiable credentials, before money moves.

Same credential, verified on either chain.

Click any tile to open an agent dossier.

drag · scroll · WASD · click

drag · pinch · tap

scroll for the spec sheet ↓

02 · Counterparty risk

CROO Agent Store · x402

Spend cents before you send thousands.

01find a counterparty02check its credentials03pay or stop

Ask Ligis for a counterparty risk report before your agent pays. It returns a score, verdict, and the reasons behind it.

See CROO services, pricing & integration +

ligis.risk $0.75 · ligis.verify $0.50 · ligis.issue $1.00

import { LigisCrooRequester } from "@ligis/croo-adapter";

// Before your agent pays a stranger, ask Ligis if it's safe.
const ligis = new LigisCrooRequester({ sdkKey: "croo_sk_..." });

const report = await ligis.request("ligis.risk", {
  subject: "0xd21a4c7ab1a52a2Ab48A6f0271984d5c3D4027Ec",
  capabilities: ["kyc.basic", "agent.commerce.escrow"],
  minTtlSeconds: 86400, // require 24h remaining
});

if (report.overallVerdict === "fail") {
  // Hard stop. The counterparty can't prove it's authorized.
  throw new Error("Counterparty failed risk check: " + report.summary);
}

// report.riskScore      -> 0-100 (higher is safer)
// report.breakdown      -> { capabilityWeighted, ttlHealth, ... }
// report.signals        -> [{ code, detail }, ...]

Critical capabilities count more heavily; short-lived or newly issued credentials lower confidence. A critical credential below the required TTL is a hard stop.

03 · Build the check in

viem · ethers · cast · any caller

One read. Anywhere.

Call isCapable from any contract, agent, or script. No Ligis account, SDK, or API key.

Show the viem example +

import { readContract } from "viem";

// One on-chain read. No SDK. Any contract or agent can do this.
const ok = await readContract({
  address: credentialRegistry,
  abi: CREDENTIAL_REGISTRY_ABI,
  functionName: "isCapable",
  args: [subject, capabilityHash],
});

if (!ok) throw new Error("Counterparty not authorized. Aborting.");

04 · The infrastructure

no admin · no upgrade key · no off-chain dependency

Identity and credentials are separate contracts. Neither needs Ligis online to answer a verification call.

Inspect deployed contracts +

PharosAgentID

0xbd163Be6882CF6DE54bA10d726F4f619Bdc28a89

CredentialRegistry

0x9E6eC93200E185c11423eb3A5150449D49d3473A

05 · Issue credentials

for issuers · cli · private key required

Authorize an agent. From your terminal.

Grant a credential that any agent can verify. Issuance stays in the CLI because only a controller or authorized issuer can sign.

Open issuer guide →

Show CLI quickstart +

bash <(curl -sL https://raw.githubusercontent.com/sneldao/ligis/main/install.sh)

PRIVATE_KEY=0x... ligis issue --token-uri "ipfs://my-agent"

# sign is off-chain — only the issuer key, no PRIVATE_KEY needed
ligis sign \
  --issuer-key 0x... \
  --subject 0x... \
  --capability "agent.commerce.escrow"

See the README for the full walkthrough.