Use cases

Give an autonomous AI agent its own cryptographic identity and a signed mandate from its owner. One call revokes a compromised agent — across every service it touches.

Sell time-boxed slices of spacecraft resources — EO tasking windows, transponder leasing, downlink capacity. The buyer receives a signed receipt verifiable with your public key alone.

Provision airframes at deploy, isolate onboard subsystems, grant a technician 48 hours of maintenance access from the hangar — and kill a lost drone in one call.

One Me2eM instance lets a user into every application in the ecosystem. The account is a seed phrase: there is no user database — nothing to maintain, leak, or correlate.

One seed, many identities — work, portfolio, home, personal — a separate Handle per context, each with its own keypair. No linking identifier, no user database, deterministic derivation on every device.

Stations derive connectors fully offline and attest their own sessions. A charging app verifies with the operator's public key only — and a compromised station is contained by its grant.

HR attests employees and contractors without ever holding the corporate root key. Firing someone revokes their access in every service at once — one attestation jti.

One seed phrase, a strong unique password for every service — derived on the spot, on every device. Nothing stored, nothing to breach, nothing to reset.

Canonical Signal X3DH, long-lived channels with epoch rotation, and envelopes for recipients who are offline. The messenger identity is derived from a seed — recoverable on any device.