The trust layer for software that acts on your behalf.
Paphwey lets a person grant an AI agent scoped access to their identity wallet — so the agent can complete a business challenge under authority the enterprise can rely on.
§ 02 · Four actors · One verifiable outcomeTopology
Four actors. Four keys. One cryptographic chain from user consent to a result the business can act on.
§ 03 · How it worksFour steps
The model
From quiet permission to a business outcome.
Four steps take a user from wallet consent to a result an enterprise can rely on.
01
Identity wallet
The user holds trusted identity and approval capability on their own device — not in the agent, not in the app.
02
Authorize agent
The user grants the AI agent scoped permission to use the wallet for a specific purpose or challenge.
03
Agent acts
The agent uses the approved access to complete onboarding, approvals, step-up checks, or other business actions.
04
Trusted outcome
The business receives a verifiable result with strong confidence around who approved the action and what the agent was allowed to do.
KYA extends KYC
KYC verifies the human.
Know Your Customer answers a one-time question: is this person real, and are they who they claim to be? It lives in your regulated vendor — Onfido, Persona, or whichever provider already holds the signal. Paphwey does not replace that work, and we are not a KYC vendor. We consume the KYC outcome your provider already produces.
KYA extends KYC
KYA verifies and constrains the agent.
Know Your Agent answers the per-action question: under what authority is this Non-Human Identity (NHI) acting, and is the action inside the user's delegation? Paphwey binds the agent to a scoped, revocable credential and emits a signed attestation the relying party can rely on — next to, not instead of, the KYC signal.