§ demo

Generate a real delegation envelope. In your browser.

Every byte below is computed live with @orangecheck/agent-core — the same package an MCP server runs to verify your envelope. No fake hashes; the canonical message is what your wallet would actually BIP-322-sign in the production flow.

envelope.id · sha256 of canonical message

1520cbc8470ae173269098198a15e63b06a6c2dc062cad8a00072992975cc0bb

this is the canonical id. recompute it from the envelope and you get the same 64 hex chars, byte-for-byte.

canonical-message · what your wallet bip-322 signs

oc-agent:delegation:v1
principal: bc1qprincipal0000000000000000000000000000000
agent: bc1qagent000000000000000000000000000000000000
scopes: mcp:invoke(server=https://mcp.example.com,tool=invoice.create),mcp:invoke(server=https://mcp.example.com,tool=invoice.refund)
bond_sats: 250000
bond_attestation: 
issued_at: 2026-04-29T00:59:01Z
expires_at: 2026-05-29T00:59:01Z
nonce: 52cc39d55843d786bc5db9d5e503443e

§ what would happen next, in production

Your wallet (UniSat / Xverse / Leather / Alby / paste- manual) signs the canonical message above with the principal's Bitcoin private key. Console never sees the key.
The signed envelope is anchored via the OC Stamp pipeline (OpenTimestamps under the hood) — a Bitcoin block confirmation arrives within 60 minutes.
The envelope is published to Nostr kind 30083 with d-tag oc-agent-del:<id> for public discovery. Multiple relays for redundancy.
Any verifier — your MCP server, an auditor, a counterparty — independently re-derives this exact envelope id from the canonical bytes, confirms the BIP-322 signature, and accepts the agent's authority. No console.ochk.io reachability required.

try the real flow →

// @orangecheck/agent-core · MIT · same code an MCP server uses to verify · runs in your browser, no api call to console.ochk.io

Why a live demo, not a deck slide

Every word on this page that says “deterministic,” “byte-identical across implementations,” and “verifies offline forever” is checkable here. Edit a single character of any field above and the canonical message changes; the envelope id changes; any future verifier rejects the old id and accepts only the new one. This is what your compliance reviewer is verifying when they sign off on agent authority.

Generate a real delegation envelope. In your browser.

01 · principals

02 · scopes

03 · bond + ttl

Why a live demo, not a deck slide