did:web Credential Engine
Last updated: 2026-08-08
An independent, source-available research project: a small self-hostable engine that issues and verifies W3C Verifiable Credentials anchored to your own web domain ( did:web did:web. A way to anchor a digital identity to your own web domain — anyone can verify it by reading a file on your site, like checking a public key. ). You run it on your own infrastructure; verification reads your domain's public identity document directly, with no call back to us.
What it is
A lightweight container image plus a docker-compose bundle. It implements
W3C VC v2, did:web did:web. A way to anchor a digital identity to your own web domain — anyone can verify it by reading a file on your site, like checking a public key. , and SD-JWT SD-JWT. Selective-Disclosure JWT — a format that lets a holder reveal only the fields needed (e.g. prove you're over 18 without showing your birthdate). (RFC 9901) selective disclosure, with
Ed25519 Ed25519. A fast, secure digital-signature method used to prove a credential was really issued by its claimed source and hasn't been altered. signatures, key rotation, and bitstring-status-list revocation. Verification is
stateless verification stateless verification. Checking a credential against public information (the issuer's published key) with no call back to the issuer — so it scales and can't be tracked. — anyone checks a credential against your published public key, not a private
store or a vendor endpoint.
Status
A research project we share publicly as source-available source-available. Code you can read and inspect (and usually extend for your own use), even if it isn't fully open-source. software ( Elastic License 2.0 ELv2. Elastic License 2.0 — lets you use, modify, and self-host the software, but not resell it as a competing hosted service. ). It is not a hosted service, has no pricing, and is not advertised as a commercial product. If you build with it, you operate it yourself.
Source
The engine and deployment manifests are on GitHub: akketix/mneurix-did-issuer ↗ (ELv2). Read it, run it locally, and extend it under the terms of the license.
Note on scope
This page exists as a technical reference only. Mneurix does not sell credentials, host issuance, or operate a managed service around this engine.