dev.keytrace.claim

An identity claim linking this DID to an external account

Repository @keytrace.dev did:plc:hcwfdlmprcc335oixyfsw7u3 namespace authority
Details · record, key tid
Kindrecord
Record keytid
Authoritykeytrace.dev
Indexed

Record

record · key tid

Properties

claimUri

requiredstring

The identity claim URI (e.g., for github: https://gist.github.com/username/id, dns:example.com)

comment

string

Optional user-provided label for this claim

  • maxLength: 256

createdAt

requiredstring · datetime

Datetime when this claim was created (ISO 8601).

failedAt

string · datetime

Timestamp when the claim last failed re-verification or was retracted

identity

requiredref

Structured data about the claimed identity, derived from the claimUri and knowledge inside the verification process. This is not the raw claim data, but a normalized set of fields that can be used for display and more.

Reference

lastVerifiedAt

string · datetime

Timestamp of the most recent successful re-verification by the system

nonce

string

Random one-time value embedded in the challenge text posted to the external service. Used by verifiers to confirm the proof was created specifically for this claim session. Keytrace itself does not use this, but other services making claims may require it for their verification process.

  • maxGraphemes: 128

prerelease

boolean

Whether this claim was created during the prerelease/alpha period

retractedAt

string · datetime

Datetime when this claim was retracted. Present only if the claim has been retracted (ISO 8601).

sigs

requiredarray

Cryptographic attestation signatures from verification services, for example from @keytrace.dev. These are optional, and so you can pass an empty array. Keytrace will place its attestation signature in the claim here so that the library @keytrace/claims can be used by external developers to not have to implement their own verification logic.

itemsref

status

string

Current verification status of this claim. Absent on legacy records, treated as 'verified'.

  • knownValues: verified | failed | retracted

type

requiredstring

The claim type identifier

  • knownValues: github | dns | activitypub | bsky | npm | tangled | pgp | twitter | linkedin | instagram | reddit | hackernews

#identity

object

Generic identity data for the claimed account

Properties

avatarUrl

string · uri

Avatar/profile image URL

Display name if different from subject

profileUrl

string · uri

Profile page URL

subject

requiredstring

Primary identifier (username, domain, handle, etc.)

Similar lexicons

semantic match

Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.

  • A cryptographic signature attesting to a claim

  • A LinkedClaim record per the DIF Labs LinkedClaims specification (https://identity.foundation/labs-linkedclaims/). Claims are immutable, signed assertions about any URI-addressable subject. Each claim has a persistent URI (claimUri) so other claims can reference it as their subject, enabling a cross-system web of trust. LinkedClaims flow on ATProto but are not exclusive to it — the claimUri may point to any system where the claim originated.

  • Identity verification status record — proves that a DID has been verified by a trusted verifier.

  • Find the ATProto DIDs (and the at-uris of their keytrace claim records) that have verifiably claimed a given external identity, keyed by claim type and subject. Matching is exact (case-sensitive) on the subject. Only non-retracted claims whose attestation signatures validate against a known keytrace server key are returned.

  • A public statement signed by one of the user's own published public keys (dev.keytrace.userPublicKey).