HelixID - Open-source identity & trust layer for AI agents

Hey Product Hunt 👋 We built HelixID because we kept hitting the same wall while building multi-agent systems: OAuth is great at getting an agent through one door, in one app, for one session. But the moment an agent needs to act across organizations, delegate a task to another agent, or prove after the fact what it did and on whose authority, the token runs out of road. There's no standard way to answer "who is this agent, who authorized it, and what was it actually allowed to do?" once you're outside a single trust boundary. So instead of building another OAuth wrapper, we went one layer deeper. HelixID issues every agent a Decentralized Identifier and W3C Verifiable Credentials, verifies Verifiable Presentations at the execution boundary, and enforces scope with OPA/Rego, all backed by a tamper-evident audit trail. OAuth is the building pass and HelixID is the passport: it travels with the agent, and it's verifiable even offline. A few things we cared about while building this: Standards over lock-in: W3C VC Data Model v2, DID Core, OPA/Rego. No proprietary format you're stuck with. Composability: this isn't a rip-and-replace. It sits alongside your existing OAuth/OIDC stack (you can exchange a Verifiable Presentation for an OAuth token via RFC 8693). Zero friction to start: npx @helixid/cli init gets you running locally in under 5 minutes, no ledger or external dependency required. Actually open: Apache 2.0, self-hostable, enterprise-legal-friendly (no AGPL headaches). This is very much a v1, and we built it in the open because we think agent identity is a problem the whole ecosystem needs to solve together, not something any one vendor should own. We'd genuinely love your feedback about what breaks, what's missing, and what you'd want it to do that it doesn't yet. Contributions and "good first issue" PRs are welcome on GitHub. Thanks for checking it out! 🙏