The internet was built without a trust layer — and the rise of agentic AI has made that gap urgent. Trust Stackers is closing it: we have released v0.1.0 of the open P2P Trust Stack — a working, published implementation of the Trust Spanning Protocol, crafted VTAs, and the verifiable credentials that connect them — and we work as consultants to help enterprises and applications integrate that verifiable trust into the systems they already run.
The core protocol engine and the application-facing agent API are now open source and published to npm. This is the starting line of the P2P Trust Stack's open source journey: a working implementation of decentralized identity, peer-to-peer relationships, and verifiable credentials that anyone can build on — under GPL-3.0, or a commercial license.
@p2p-trust-stack/core is the protocol engine — cryptography, DIDs, the encrypted
keystore, TSP, libp2p transport, relationships, VTCs/VRCs, and the transaction coordination
layer. @p2p-trust-stack/app-api is the application-facing agent API
(createAgentStack(), the typed TrustStack domains, and a closed
event catalogue) and depends on core.
# application developers
npm install @p2p-trust-stack/app-api
# protocol-only embedders
npm install @p2p-trust-stack/coreThe full stack is public — source, tests, schema migrations, CI, and governance docs. Use it under GPL-3.0-only, or under a commercial license when GPL-3.0 obligations are not acceptable. All contributors sign the Contributor License Agreement.
The API Reference documents every method of the published packages — 8 groups, 117 entries, grouped by the four Trust over IP layers with a module-by-module core reference. The stack already drives real flows: VTA creation and registration, agent names, confidential P2P chat, the personhood ceremony and VRC issuance, VTC creation and governance, and credential issuance through the Credential Factory.
We engineer trust infrastructure in two complementary ways:
Our four-layer, standards-based stack gives people, communities, and AI agents verifiable, private, tamper-proof identity and relationships — built on W3C standards and the Trust over IP model. v0.1.0 is released and open source: the protocol engine and agent API are published to npm for anyone to build on.
The Stack →As consultants, we work with enterprises and application teams to bring verifiable trust into their products and organizations — from architecture and standards guidance to hands-on implementation.
Talk to Us →The stack is organized around the four-layer Trust over IP (ToIP) model. Here's where each layer stands today.
| Layer | Name | Technology | Status |
|---|---|---|---|
| 4 |
Trust Applications
PNM / CNM / Developer Apps
|
End-user UI/UX for creating, joining, and managing trust applications, communities, and networks. The Agent App reference applications (web + TUI) are built and operational — registering VTAs, founding and administering VTCs, issuing VRCs, managing community rules, sending invitations, and chatting — and the stack is already being embedded in other test applications. | Active — Reference Apps Built |
| 3 |
Trust Tasks
VTCs & VRCs
|
W3C Verifiable Credentials issued through the unified Credential Factory · data-driven Governance Guard and Policy Engine · trust-task ceremonies · VTC establishment, membership and VRC personhood flows operating · released in v0.1.0 · trusttasks.org | Foundations Laid |
| 2 |
Trust Spanning
VTAs & TSP
|
Trust Spanning Protocol (TSP) Rev 3 · did:scid:vh + did:peer:4 · libp2p transport · HPKE-Base confidential messaging · XRFI/XRFA/XRFD relationship handshake · post-quantum signatures and hybrid KEM · personhood ceremony · agent name registration — released in v0.1.0 | Active — Released in v0.1.0 |
| 1 |
Trust Support
DID Infrastructure
|
did:scid:vh (self-certifying, hash-chained, operational) · native key rotation with witness attestation — released in v0.1.0 | Active — Released in v0.1.0 |
Watch the first working demo of the P2P Trust Stack, presented to the Decentralized Trust Graph working group.