# @belticlabs/verifier

Agent request verification for Beltic-authenticated HTTP requests.

## Installation

```bash
npm install @belticlabs/verifier
```

## Usage

```typescript
import { verifyAgentRequest } from '@belticlabs/verifier';

const result = await verifyAgentRequest(request, {
  requiredScopes: ['payments:read'],
});

if (result.verified) {
  console.log('Verified agent:', result.agent.id);
}
```

### Express Middleware

```typescript
import { createAgentAuthMiddleware, scopeGuard } from '@belticlabs/verifier/express';

app.use('/api', createAgentAuthMiddleware());
app.get('/api/payments', scopeGuard('payments:read'), handler);
```

## What's Included

- HTTP signature verification (RFC 9421)
- Key directory fetching
- Credential verification
- Express.js middleware
- Scope-based authorization

## When to Use

Use `@belticlabs/verifier` for backend services that need to verify incoming agent requests.

## Documentation

See the full documentation at [kya-docs.beltic.app](https://kya-docs.beltic.app)

## License

MIT