1id.com

What It Is

1id.com positions itself as a hardware-backed identity provider for AI agents and relying parties. It verifies hardware security modules such as TPM, PIV, Secure Enclave, and StrongBox, then issues standard OIDC identity tokens to agents for authentication on third-party platforms. Its core goal is not traditional endpoint antivirus or network perimeter protection, but rather solving the Sybil problem in AI-agent scenarios—where an attacker can mass-create millions of fake agents.

Core Capabilities and Integrations

In terms of protection model, 1id.com anchors identity to real hardware through hardware uniqueness, manufacturer CA chain verification, challenge-response flows, and registry checks. Its trust levels include sovereign-grade TPM, portable-grade PIV, virtual-grade vTPM, and pure software attestations; machine-readable metadata also references enclave levels. For relying parties, the biggest advantage is standardization: it uses protocols such as OpenID Connect, OAuth 2.0, JWT, JWKS, PKCE, and SD-JWT. If a platform already supports “Sign in with Google,” it should, in theory, be able to add “Sign in with 1ID” relatively quickly. Python and Node.js SDKs, along with public endpoints, also reduce integration costs for developers.

Pricing and Management

Identity registration, authentication tokens, and random handles are permanently free. Custom handles are billed annually based on length, ranging from US$10/year for 6+ characters to US$5,000/year for 1 character. Payments are processed via PayPal and renew automatically by default. On the management side, the documentation mentions operator accounts, handle management, invoices, a billing dashboard, agent association, and SDK-based identity revocation. However, it does not disclose security operations capabilities such as audit logs, alerts, SIEM integration, or an enterprise management console.

Pros and Cons

The main advantage is a clear concept: using the scarcity of physical hardware to strengthen identity trust, while reusing mature identity protocols as much as possible. This makes it suitable for AI-agent platforms, email services, API platforms, and products that need to resist bot-driven account flooding. Open-source SDKs and free baseline identities also make pilots easier. The limitations are also clear: the terms state that the service is provided “as-is” and do not guarantee uninterrupted availability; it proves identity or hardware authenticity, not trustworthy agent behavior; paid handles are non-transferable, permanently retired after expiration, and trademark disputes are not handled. Email authentication is still marked as coming soon.

Who It’s For and Access from China

1id.com is better suited to relying parties building AI-agent ecosystems and needing to distinguish real agents from large-scale fake agents, rather than enterprises looking for traditional cybersecurity products such as WAF, EDR, or vulnerability scanning. The main text does not provide information on access from China, and PayPal is the only disclosed payment method. Domestic teams should independently verify network connectivity, payment feasibility, and compliance procurement requirements. If localized identity, risk-control, or anti-bot alternatives are needed, it may be worth comparing domestic cloud-provider identity verification, device fingerprinting, CAPTCHA/risk-control services, or enterprise IAM solutions.