This package implements BLS12-377 in TypeScript. It also contains functions for the generation of BLS proofs of possession, as done in [Celo](https://github.com/celo-org/celo-monorepo).

OAuth 2.0 helpers for IT-Wallet flows, including Pushed Authorization Requests, PKCE, DPoP, JAR/JARM utilities, access-token handling, wallet/client attestation helpers, and MRTD proof-of-possession support.

Client SDK for Skhema registered agents — local keypair generation, enrollment-token redemption, and proof-of-possession request signing (Agent Auth Protocol).

DPoP (RFC 9449) proof-of-possession middleware for Hono.

Device-bound sessions: a stolen session token is useless without the device's non-extractable key. DPoP-style proof-of-possession as a drop-in middleware for any backend.

OAuth 2.0 Demonstrating Proof-of-Possession at the Application Layer (DPoP) server-side implementation for Node.js

OCP Hub building blocks. Root export: the WSS profile — ES256 keys, delegated QR pairing with proof-of-possession, session lifecycle. `/embed` export: the minimal HTTP+SSE turn profile, site-key and origin enforcement, quotas, widget document. `/server` e

Agent identity SDK for ScopeBlind. DPoP proof-of-possession for AI agents, CLIs, and MCP servers. Generates holder-binding commitments for signed decision receipts.

Server-side verification of Clay Seal agent credentials for JavaScript/TypeScript MCP servers and tool gateways: offline JWT-SVID verification, Biscuit capability authorization, and sender-constrained proof-of-possession.

The VAID proof-of-possession request signer (TypeScript): signs requests into the four x-synthera-* PoP headers, byte-identical to the Rust and Python clients.

The VAID proof-of-possession signing primitive (TypeScript): RFC 8785 (JCS) -> SHA-256 -> Ed25519, byte-identical to the Rust and Python implementations against the frozen conformance vectors.

MCP server for Obsideo: encrypted, S3-compatible storage with continuous cryptographic possession proofs. Self-serve signup (12 GB free, no card), put/get/ls/rm/usage tools. Runs on YOUR machine; credentials and keys never leave it.

AGENZA verification library — verify W3C Verifiable Credentials, proof-of-possession, and ECDSA signatures from the AGENZA identity protocol

OCI Common module for NodeJS

OCI NodeJS client for ObjectStorage

OCI NodeJS client for Core

OCI NodeJS client for WorkRequests

OCI NodeJS client for Vulnerability Scanning Service

OCI NodeJS client for Threat Intelligence Service

OCI NodeJS client for Vbs Inst Service