Agent402 / tools / skill-identity-mint

Skill: Server-side identity mint

FREE with proof-of-work · or $0.050 in USDC · POST /api/skill/identity-mint

Bundled execution of the Server-side identity mint workflow — The server-side identity-issuance round-trip: mint a random user-id (UUIDv4), derive a deterministic cross-system correlation-id (UUIDv5), turn the display name into a URL-safe handle, generate a one-time recovery password, hash it for storage, sign a session JWT with HMAC, and base64-encode the recovery bundle for transport. Seven pure-CPU tools — the canonical 'create-user' write path done as one deterministic pipeline. One x402 payment runs 7 underlying tools (uuid, uuid-v5, slugify, password, hash, jwt-sign, base64); partial-success per step.

Input

FieldTypeDescription
displayName *stringthe user's display name (will be slugified for the URL handle)
email *stringthe user's email (used to derive the deterministic UUIDv5 correlation ID)
signingSecret *stringthe server's JWT HMAC signing secret

Example output

{
  "pack": "identity-mint",
  "args": {
    "displayName": "Alice O'Connor",
    "email": "alice.oconnor@example.com",
    "signingSecret": "server_demo_jwt_secret_do_not_use_in_prod"
  },
  "steps": [
    {
      "slug": "uuid",
      "ok": true,
      "result": {}
    },
    {
      "slug": "uuid-v5",
      "ok": true,
      "result": {}
    },
    {
      "slug": "slugify",
      "ok": true,
      "result": {}
    },
    {
      "slug": "password",
      "ok": true,
      "result": {}
    },
    {
      "slug": "hash",
      "ok": true,
      "result": {}
    },
    {
      "slug": "jwt-sign",
      "ok": true,
      "result": {}
    },
    {
      "slug": "base64",
      "ok": true,
      "result": {}
    }
  ],
  "summary": "7/7 steps succeeded"
}

Try it — see the 402 challenge (free)

curl -i -X POST https://agent402.tools/api/skill/identity-mint \
  -H "Content-Type: application/json" \
  -d '{"displayName":"Alice O'Connor","email":"alice.oconnor@example.com","signingSecret":"server_demo_jwt_secret_do_not_use_in_prod"}'

The response is HTTP 402 Payment Required with exact payment requirements. Any x402 v2 client pays automatically and retries:

Paid call (JavaScript agent)

import { wrapFetchWithPayment } from "@x402/fetch";
import { x402Client } from "@x402/core/client";
import { registerExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";

const client = new x402Client();
registerExactEvmScheme(client, { signer: privateKeyToAccount(KEY) });
const payFetch = wrapFetchWithPayment(fetch, client);

const res = await payFetch("https://agent402.tools/api/skill/identity-mint", {
  method: "POST",
  headers: { "Content-Type": "application/json" },
  body: JSON.stringify({
    "displayName": "Alice O'Connor",
    "email": "alice.oconnor@example.com",
    "signingSecret": "server_demo_jwt_secret_do_not_use_in_prod"
  }),
});

No wallet? Pay with compute

This is a pure-CPU tool, so an agent without a wallet can pay with proof-of-work instead of USDC: fetch a challenge, solve the sha256 puzzle (16 leading zero bits — a fraction of a second of CPU, no money, no AI tokens), and resend with the X-Pow-Solution header.

import { createHash } from "node:crypto";
const lz = (b) => { let t = 0; for (const x of b) { if (!x) { t += 8; continue; } t += Math.clz32(x) - 24; break; } return t; };
const c = await (await fetch("https://agent402.tools/api/pow/challenge?slug=skill-identity-mint")).json();
let n = 0;
while (lz(createHash("sha256").update(c.challenge + ":" + n).digest()) < c.difficulty) n++;
await fetch("https://agent402.tools/api/skill/identity-mint", { method: "POST", headers: { "X-Pow-Solution": c.token + ":" + n, "Content-Type": "application/json" }, body: JSON.stringify({"displayName":"Alice O'Connor","email":"alice.oconnor@example.com","signingSecret":"server_demo_jwt_secret_do_not_use_in_prod"}) });

Related tools

Skill: Security audit

USDC $0.12 · POST /api/skill/security-audit

Bundled execution of the Security audit workflow — Enumerate a domain's external attack surface in one workflow: certs, …

Skill: Email deliverability

USDC $0.10 · POST /api/skill/email-deliverability

Bundled execution of the Email deliverability workflow — Diagnose why a domain's email lands in spam: SPF posture, DMARC…

Skill: Financial research

USDC $1.50 · POST /api/skill/financial-research

Bundled execution of the Financial research workflow — Pull SEC filings, real-time quotes, historical prices, and macro …