Cryptographic identity and tamper-evident audit evidence for autonomous AI agents. W3C DID + Verifiable Credentials, on-chain anchored. Supports EU AI Act Article 12 logging. Verification is free.
A shared API key identifies the account, not the acting agent. It leaves no per-action record tied to a verifiable identity, and logs can be edited or rotated. When an auditor asks what an agent was authorized to do and what it actually did, there is no answer that holds up.
What MolTrust does
Agent identity *a W3C DID per agent: registered, signed, resolvable.
Authorization *the Agent Authorization Envelope (AAE) records MANDATE, CONSTRAINTS and VALIDITY as a signed credential. Published as IETF Internet-Draft draft-kroehl-agentic-trust-aae-00.
Evidence *SHA-256 evidence hashes anchored on Base L2. Tamper-evident by cryptographic proof, not by policy.
Export *signed audit bundle (PAdES-B-LT) covering any period, verifiable independently.
Verification is free, always
Anyone can verify an agent's identity, credentials and behavioural score without an account, an API key, or a payment. Only agent operators pay. This is deliberate: a trust layer that charges the verifier does not get adopted.
No lock-in, no custody
Every credential is a standards-compliant W3C Verifiable Credential. Auditors validate signatures with any DID-conformant tool, no MolTrust software or account in the verification path. MolTrust does not hold your evidence long-term: the on-chain anchor holds the proof, you hold the exported file. Operational retention is 12 months.
Scope
MolTrust is a deterministic cryptographic protocol layer, comparable in role to TLS or PKI. It supports EU AI Act Article 12 logging requirements with cryptographic provenance. Full logging responsibility under Article 12(1), conformity assessment under Article 43, and compliance responsibility under Article 16 remain with the AI-system provider. MolTrust does not issue compliance certificates and does not provide legal advice.
Standards
W3C DID Core and Verifiable Credentials v2, IETF Internet-Draft (AAE), DIF Universal Resolver driver , aligned with the Singapore IMDA Model AI Governance Framework for Agentic AI (2026), Circle Alliance member, technical paper: arXiv 2605.06738
Highlights
Verifiable agent identity, a W3C DID per agent with a signed authorization envelope recording MANDATE, CONSTRAINTS and VALIDITY. Published as an IETF Internet-Draft, not a proprietary primitive. Any DID-conformant tool can resolve and verify it.
Audit evidence that outlives the vendor, SHA-256 hashes anchored on Base L2, exported as a signed PDF (PAdES-B-LT). Your auditor verifies it independently: no MolTrust account, software, or API call in the verification path. Supports Article 12 logging.
Verification is free for everyone, only agent operators pay. Any party can verify an agent's identity, credentials and score without an account, a key, or a payment. Standards-based on W3C DID, no vendor lock-in.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
This listing offers a single Free dimension with no charge. You get access to every verification endpoint and can create an API key using only an email, with no credit card required. Registration includes a starting pool of credits, and cryptographic identity plus public-ledger anchoring are covered at no cost. Because there is one free option, pricing does not scale across tiers or usage add-ons here. The Free dimension suits proof-of-concept work and internal testing. There are no paid steps or quantity settings to configure within this Marketplace offering.
Top-of-mind questions for buyers
What counts as one credit, and how much does each verification call use?
Credits fund your API calls. Most calls cost one to two credits each. Reads like health checks, DID resolution, and pricing lookups are free. Credential issuance is heavier and costs more. Registration includes 100 credits, which are transactional with no monthly quota.
What happens when my 100 registration credits run out on the free tier?
The free credits are transactional with no monthly refill. When the balance runs low, an agent pre-funds more credits itself by paying USDC on Base through the x402 rail. There is no monthly quota and no human top-up step in this free dimension.
What is included at no cost on the free tier, and what is not?
The free tier covers every verification endpoint, an email-only API key, 100 starting credits, and public-ledger anchoring on Base L2. Signed audit-bundle export (PAdES-B-LT) is not part of the free dimension. Evidence retention runs 12 months, held by the on-chain anchor and your exported file.
moltrust.ch+1
Helpful?
Vendor refund policy
This product is offered free of charge through AWS Marketplace. No fees are collected, therefore no refunds apply. Questions regarding this policy can be directed to lars@moltrust.ch.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
API-Based Agents and Tools integrate through standard web protocols. Your applications can make API calls to access agent capabilities and receive responses.
Additional details
Usage instructions
A2A
MCP
API
A2A agent card
<https://api.moltrust.ch/.well-known/agent.json>
MolTrust publishes a Google A2A-compatible agent card with trust extensions: DID, reputation, and capability data. Listed on a2aregistry.org.
JSON-RPC endpoint
<https://api.moltrust.ch/a2a>
What other agents can do
Resolve a MolTrust DID, request a trust score, verify a credential, and check an authorization envelope (AAE) — all without an account or key. Verification is free for every party.
Trust extensions
The agent card carries the agent's DID, its behavioural trust score, and the signed authorization envelope under which it operates. Any counterparty can verify these independently against the on-chain anchor on Base L2, with no call to MolTrust in the verification path.
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Elevate organizational security with strong and adaptive authentication, preventing unauthorized access to your most critical systems, applications and sensitive data.
With One Identity Safeguard for Privileged Sessions, you can control, monitor and record privileged sessions of administrators, remote vendors and other high-risk users.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.