dev.keytrace.claim
An identity claim linking this DID to an external account
Details · record, key tid
| Kind | record |
|---|---|
| Record key | tid |
| Authority | keytrace.dev |
| Indexed |
Record
record · key tidProperties
The identity claim URI (e.g., for github: https://gist.github.com/username/id, dns:example.com)
comment
stringOptional user-provided label for this claim
maxLength: 256
Datetime when this claim was created (ISO 8601).
failedAt
string · datetimeTimestamp when the claim last failed re-verification or was retracted
Structured data about the claimed identity, derived from the claimUri and knowledge inside the verification process. This is not the raw claim data, but a normalized set of fields that can be used for display and more.
lastVerifiedAt
string · datetimeTimestamp of the most recent successful re-verification by the system
nonce
stringRandom one-time value embedded in the challenge text posted to the external service. Used by verifiers to confirm the proof was created specifically for this claim session. Keytrace itself does not use this, but other services making claims may require it for their verification process.
maxGraphemes: 128
prerelease
booleanWhether this claim was created during the prerelease/alpha period
retractedAt
string · datetimeDatetime when this claim was retracted. Present only if the claim has been retracted (ISO 8601).
Cryptographic attestation signatures from verification services, for example from @keytrace.dev. These are optional, and so you can pass an empty array. Keytrace will place its attestation signature in the claim here so that the library @keytrace/claims can be used by external developers to not have to implement their own verification logic.
status
stringCurrent verification status of this claim. Absent on legacy records, treated as 'verified'.
knownValues: verified | failed | retracted
The claim type identifier
knownValues: github | dns | activitypub | bsky | npm | tangled | pgp | twitter | linkedin | instagram | reddit | hackernews
#identity
objectGeneric identity data for the claimed account
Properties
avatarUrl
string · uriAvatar/profile image URL
displayName
stringDisplay name if different from subject
profileUrl
string · uriProfile page URL
Primary identifier (username, domain, handle, etc.)
Similar lexicons
semantic matchLexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.
-
dev.keytrace.signature
objectA cryptographic signature attesting to a claim
-
com.linkedclaims.claim
recordA LinkedClaim record per the DIF Labs LinkedClaims specification (https://identity.foundation/labs-linkedclaims/). Claims are immutable, signed assertions about any URI-addressable subject. Each claim has a persistent URI (claimUri) so other claims can reference it as their subject, enabling a cross-system web of trust. LinkedClaims flow on ATProto but are not exclusive to it — the claimUri may point to any system where the claim originated.
-
Identity verification status record — proves that a DID has been verified by a trusted verifier.
-
Find the ATProto DIDs (and the at-uris of their keytrace claim records) that have verifiably claimed a given external identity, keyed by claim type and subject. Matching is exact (case-sensitive) on the subject. Only non-retracted claims whose attestation signatures validate against a known keytrace server key are returned.
-
dev.keytrace.statement
recordA public statement signed by one of the user's own published public keys (dev.keytrace.userPublicKey).