Verify. Delegate. Approve.

One API for humans and AI agents. Every answer is a signed proof you keep — checkable by anyone, even offline.

Start free

‘Ask your AI’ copies a short brief — let your own model judge the fit.

No credit card required • 300 proofs free/month • Global coverage

Verify anything.
Hold the proof.
control
delegation
action
me

Everything on the internet claims to be true.

A signed proof actually is.

§ 1 · What Proof secures

One API. All things verified.

Every verification, delegation, and approval ends the same way — you hold the signed proof.

Proof of Control

Secure your business with a verification layer.

Verify someone controls a phone, email, or domain. Reverse OTP for phones — the user sends a message TO Proof; email uses magic link or OTP, domains use DNS/HTTP/admin email. Social accounts (OAuth) and crypto wallets (signing) are coming soon.

ReplacesPer-message OTP bills, DIY email loops, manual domain checks, screenshot of socials and wallets.

Explore Control10 channels live today
Proofproof.holdings · verification api
AttestationNº 2026-0042
subject+370 691 •• •99
channelSMS/WhatsApp/TelegramReverse OTP
challengeVRF-4821 — sent by the user, not to them
receivedVRF-4821 · 14:02:07 UTC
verdictControl provenno code to intercept — no SIM-swap window
Minted· verified
control · ES256
Proof of Delegation

Prove the listing you stand behind.

Search a well-known product on an app registry and several listings answer to its name — the listing itself cannot say which is which.

A delegation is the note the company signs naming exactly one artifact — an MCP server, a package, a live endpoint — checkable by anyone, cancellable any day. Revoke it and every verifier reading the published status list sees the change within a minute, while the domain proof and every sibling delegation stay intact.

ReplacesAnyone can ship a package or an MCP server under your brand’s name, and you have no way to state publicly which ones you authorized.

See how it worksVerify offline · revoke in ≤1 min
registry search: proof.holdings — example4 results
@proof-holdings/mcp-serverby proof.holdings
proof-holdings-mcpby prooff.holdings
proof-mcp-serverby pr00f.holdings
proof-holdings-officialby proof-hodlings.io

Which one does the company stand behind? The listing has nowhere to say it.

one of these is our real package — the look-alikes are invented for this page

Proof of Action

Secure your irreversible actions with human approval.

Human-in-the-loop approvals for irreversible actions. AI agents request sign-off via Telegram or WhatsApp before wires, deploys, or deletions; every decision is cryptographically signed.

Replaces“OK, send it” in a WhatsApp thread — sign-off nobody can prove later.

Explore ActionE2E encrypted
Proofproof.holdings · verification api
ApprovalNº 2026-0087
requestfinance-bot requests sign-off — “Wire €12,400 to team.management?”
channelTelegram · E2E encrypted
verdictApproved14:02 UTC — the decision itself is signed
Minted· approved
action · ES256
Proof of Me

Secure your team with impersonation defense.

CEO-fraud wires, fake-exec requests — plus the family an impostor targets at home.

Anti-impersonation reverse verification. Enroll trusted challengers; when someone claiming to be you contacts them, one tap sends you a cross-channel confirmation — you approve or deny. Drills keep challengers trained.

ReplacesCode words and call-back rituals that get skipped when it matters.

Explore MeCross-channel · scheduled drills
the impostor

incoming call · your saved number

“It's me. Can you send that payment today?”

The number checks out. Maria taps her challenger button anyway…

whatsapp logoyou
Confirm it's you? Someone is asking Maria for a payment.
DeniedMaria sees the verdict instantly — the impostor doesn't.
Minted· confirmed
me · ES256

Shipping soon

§ 2 · The proof token

Proofs you keep, not statuses you query

Every verification, delegation, and approval mints a signed ES256 bearer token. It accumulates into a portfolio you can present anywhere — and anyone can verify the signature offline against our published public key. No API call, no account needed at verification time.

Proof of what you hold. Hold the proof. That's the name: proof.holdings.

  • Revocable — validity is checkable without exposing the underlying data
  • Machine-readable for agents: 176 MCP tools speak the same proofs
unverified_claim.txtUNSIGNED
proof_token.jwtCONTROL
sub+370 691 •• •99
algES256
issproof.holdings
typproof-of-control
keypublic JWKS · no account needed

eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InByb29mLTIwMjYifQ.eyJ0eXBlIjoicGhvbmUiLCJjbGFpbSI6ImNvbnRyb2wi...

✓ signature valid · verified offline

§ 3 · For developers

Ship verification in minutes

Official SDKs for JavaScript, Python, PHP, and Go — plus an MCP server for AI agents.

  • Typed clients — automatic retries, polling, typed errors
  • ES256-signed proof tokens for offline verification
  • Test mode for development and staging

Works with

claude logo
openai logo
grok logo
crewai logo
cursor logo
openclaw logo
llamaindex logo
autogpt logo
relevanceai logo
langchain logo
dify logo
n8n logo
make logo
zapier logo
github logo
telegram logo
whatsapp logo
slack logo
discord logo
ethereum logo
solana logo
bitcoin logo
google logo
linkedin logo
claude logo
openai logo
grok logo
crewai logo
cursor logo
openclaw logo
llamaindex logo
autogpt logo
relevanceai logo
langchain logo
dify logo
n8n logo
make logo
zapier logo
github logo
telegram logo
whatsapp logo
slack logo
discord logo
ethereum logo
solana logo
bitcoin logo
google logo
linkedin logo
$ npm install @proof-holdings/sdk
1import { Proof } from '@proof-holdings/sdk';
2
3const proof = new Proof('pk_live_...');
4
5// Create a phone verification
6const verification = await proof.verifications.create({
7 type: 'phone',
8 channel: 'whatsapp',
9 identifier: '+37069199199',
10});
11
12// User sends code via WhatsApp
13// Poll until verified (or use webhooks)
14const result = await proof.verifications
15 .waitForCompletion(verification.id);
16
17console.log(result.proof.token);
18// "eyJhbGciOiJFUzI1NiI..."

§ 4 · Under law

Human oversight is becoming law.

Already enforced by GDPR and 9 more oversight laws — and the AI regulations below take effect through 2027.

15 regulations · 36 jurisdictions · 10 in force today

GDPR Art. 22

In force today

UK GDPR 22A–22D

In force today

NYC Local Law 144

In force today

Swiss FADP Art. 21

In force today

Quebec Law 25

In force today

Korea PIPA Art. 37-2

In force today

Utah AI Policy Act

In force today

Israel Privacy Law Amendment 13

In force today

Japan AI Promotion Act

In force today

Korea AI Basic Act

In force today

Singapore Model AI Framework

Guidance

EU AI Act Art. 50

Aug 2026

AU Privacy Amendment

Dec 2026

Colorado AI Act revised

Jan 2027

EU AI Act Art. 14

Dec 2027

GDPR Art. 22

In force today

UK GDPR 22A–22D

In force today

NYC Local Law 144

In force today

Swiss FADP Art. 21

In force today

Quebec Law 25

In force today

Korea PIPA Art. 37-2

In force today

Utah AI Policy Act

In force today

Israel Privacy Law Amendment 13

In force today

Japan AI Promotion Act

In force today

Korea AI Basic Act

In force today

Singapore Model AI Framework

Guidance

EU AI Act Art. 50

Aug 2026

AU Privacy Amendment

Dec 2026

Colorado AI Act revised

Jan 2027

EU AI Act Art. 14

Dec 2027

Every deadline, and what each law requires — the full timeline.

When the audit comes, evidence is the hard part.

Screenshots and chat exports don't prove who approved what. A Proof token does — signed at the moment of decision, verified offline in seconds, ready to hand over.

Designed to support your oversight and record-keeping obligations — not legal advice.

Operated by LT Telekomunikacijos (LT Telecom) — an EU telecom software company.

ProofAudit export · Q3 review
Auditor: “Who approved this?” — show evidence a human signed off on the €12,400 wire from May 3.
✓ att_9f2c41 · approved by CFO · 14:02 UTC · via Telegram — the decision itself is signed, not screenshotted.
$ proof verify att_9f2c41✓ signature valid · verified offline

One of 1,284 signed approvals this quarter — you hand over a token, not a screenshot folder.

And your proofs are electronic signatures.

You don't sign a document — you sign with an asset. Under eIDAS, an electronic signature is data in electronic form used to sign, and every proof token is exactly that. Verification, delegation, and approval are electronic signatures today.

SESSimple Electronic SignatureAsserted today
AESAdvanced Electronic SignatureTechnical hallmarks
QESQualified Electronic SignatureOn a path toward qualified

How a proof token maps to eIDAS is our own assessment, not a legal determination — informational, not legal advice.

§ 5 · Pricing

Pay for outcomes, not attempts

SMS providers bill per message — delivered or not, verified or not. Proof bills per signed proof: one price for a completed verification, whatever the channel, wherever the user.

Proofproof.holdings · verification api
Schedule of RatesNº 2026-08 · effective 25 Aug 2026
  1. €0pay as you go300 free proofs/monthno credit cardthen €0.03/proofStart free
  2. €9per month1,000 proofs/monthwebhooks · email supportthen €0.03/proofGet started
  3. €29per month3,000 proofs/monthcustom brandingthen €0.025/proofGet started
  4. €79per month10,000 proofs/monthpriority supportthen €0.02/proofrecommendedGet started
  5. Custom100,000+ proofs/monthbring your own channelsrate on agreementContact sales
Plan at your volumeproofs / month
Pay as you go0 – ≈600
€9/mo≈600 – ≈1,667
€29/mo≈1,667 – 5,000
€79/mo5,000 +
All plansEvery proof type · HITL approvals · Webhooks · Test mode · Dashboard & API

That's not a discount.

It's a different billing unit — you buy signed proofs, not message attempts, and you keep them.

Start holding proofs.

Your first signed token is minutes away — 300 proofs free every month, no credit card.