Identity.
For Web 7.0.

WEB 2.0

Managed Identity

Auth0 · Okta · WorkOS

You are a row in their database.

// Web 2.0 — central trust
const session = await auth0.login({
  email, password,
});
// → session.user_id on their server
// → if they leak, you leak

WEB 3.0

Wallet Identity

MetaMask · SIWE · WalletConnect

You are your wallet — and only that.

// Web 3.0 — wallet = identity
const sig = await wallet.signMessage(
  `Sign in: ${nonce}`
);
// → 0x address only
// → no verifiable claims, no privacy

WEB 7.0

Sovereign + Verifiable

Kynetra Auth

Verifiable. Private. Sovereign.

// Web 7.0 — DID + VC + ZKP
const proof = await kynetra.present({
  did: "did:kynetra:abc...",
  reveal: ["over18"],  // ZKP
  // → no DOB ever transmitted
});

Password

Magic Link

Google OAuth

GitHub OAuth

Microsoft OAuth

Apple OAuth

Discord OAuth

SAML 2.0

OIDC

WebAuthn / Passkeys

MFA (TOTP)

DID Auth

VC-based Auth

SCIM 2.0

DID FORMAT

DID DOCUMENT (JSON-LD)

{
  "@context": "https://w3.org/ns/did/v1",
  "id": "did:kynetra:z6Mkv...abc123",
  "verificationMethod": [{
    "id": "#key-1",
    "type": "Ed25519VerificationKey2020",
    "controller": "did:kynetra:z6Mkv...",
    "publicKeyMultibase": "z6Mkv..."
  }],
  "authentication": ["#key-1"],
  "assertionMethod": ["#key-1"],
  "service": [{
    "id": "#kynetra-vc",
    "type": "VerifiableCredentialRegistry",
    "serviceEndpoint": "https://vc.kynetra.dev"
  }]
}

import { KynetraAuth } from "@kynetra/auth";

const vc = await kynetra.vc.issue({
  issuer: "did:kynetra:org-acme",
  subject: "did:kynetra:user-abc",
  type: ["VerifiableCredential",
         "EmployeeCredential"],
  claims: {
    role: "engineer",
    startDate: "2024-03-01",
    clearance: "secret",
  },
  format: "jwt_vc_json-ld",
});
// → JWT-LD signed with org Ed25519 key

const result = await kynetra.vc.verify(vc, {
  expectedIssuer: "did:kynetra:org-acme",
  expectedType: "EmployeeCredential",
  checkRevocation: true,
});

if (result.valid) {
  // ✓ signature verified
  // ✓ issuer DID resolved
  // ✓ revocation list checked
  // ✓ claims policy passed
  grantAccess(result.claims);
}

USE CASE 01

Prove age > 18

without revealing DOB

kynetra.zkp.prove({
  claim: "ageOver18",
  attr: "dob",
})

USE CASE 02

Prove balance > $X

without revealing balance

kynetra.zkp.prove({
  claim: "balanceOver",
  threshold: 50000,
})

USE CASE 03

Prove residency

without revealing address

kynetra.zkp.prove({
  claim: "residentOf",
  region: "EU",
})

BEHAVIORAL BIOMETRICS

p99 scoring

Keystroke dynamics, mouse trajectories, scroll cadence — every login is shaped by a thousand signals.

ANOMALY DETECTION

true-positive rate

Continuous learning across geo, device, time-of-day, and credential lineage. Stops account takeover at the door.

ADAPTIVE STEP-UP

median risk score

Step-up policies fire only when needed. Low-risk users stay frictionless; high-risk gets challenged.

SHA-256 CHAIN

COMPLIANCE

Audit logs export to your SIEM (Splunk, Datadog, Elastic) over webhook, S3, or pull API. Each event is signed and hash-chained to the prior event — making silent edits cryptographically impossible.

import { KynetraAuth } from "@kynetra/auth";

const auth = new KynetraAuth({
  tenantId: process.env.KYNETRA_TENANT,
  apiKey:   process.env.KYNETRA_KEY,
});

const session = await auth.signIn({
  method: "passkey",
  identifier: "user@acme.com",
});

if (session.risk.score < 0.3) {
  return session;
}
await auth.stepUp("totp");

import {
  KynetraProvider,
  KynetraSignIn,
  useKynetra,
} from "@kynetra/react";

export default function App() {
  return (
    <KynetraProvider tenantId="...">
      <KynetraSignIn
        methods={["passkey", "did", "magic"]}
        onSuccess={(s) => router.push("/app")}
      />
    </KynetraProvider>
  );
}

import KynetraAuth

let kynetra = KynetraAuth(
  tenantId: "acme",
  apiKey: Bundle.main.kynetraKey
)

Task {
  let session = try await kynetra.signIn(
    method: .passkey
  )
  if session.vcs.contains("Employee") {
    showAdminScreen()
  }
}