mdoc credentials
mDL, EUDI PID, Photo ID, EU Age Verification, and additional supported mdoc profiles
Verification · Server SDK
The ONEPROOF Server SDK
Multiple Protocols. One Server Surface.
The ONEPROOF Server SDK covers multiple credential ecosystems through a consistent server-side product surface. Supported capabilities include ISO mdoc presentation, OpenID4VP, browser-mediated presentation, ICAO ePassport data, MiDNI signed QR credentials, and AAMVA physical ID barcodes. You deploy it in your infrastructure.
✓ ISO 18013-7:2025✓ OpenID4VP 1.0✓ W3C DC API✓ ICAO Doc 9303✓ MiDNI signed QR✓ AAMVA PDF417✓ OEM & White Label
Credential and protocol families
One server product. Distinct verification models.
Each format keeps its own assurance semantics. The SDK does not describe a parsed physical barcode as equivalent to a cryptographically verified mobile credential.
ePassport / eMRTD
ICAO Doc 9303 MRZ, data-group, and passive-authentication workflows
MiDNI
Spain's signed QR identity credential and certificate-based verification
Physical driver licences
AAMVA PDF417 parsing with parsed-unsigned assurance clearly identified
Normative Annexes
Three ISO 18013-7:2025 Annexes. One Server SDK.
ISO 18013-7:2025 defines three normative annexes for online credential presentation. The Server SDK implements all three; each annex is licensed individually or as a full bundle so you configure your server verification deployment with only what your use case requires.
ISO 18013-7:2025 Annex A
Device Retrieval to Website
Server-to-server credential presentation using the ISO 18013-7 device retrieval mechanism. Enables online relying parties to request and process supported digital credentials through a standards-defined interface.
ISO 18013-7:2025 Annex B
OpenID for Verifiable Presentations
OpenID4VP protocol for standards-based online credential exchange with compatible wallets implementing the supported presentation profile.
ISO 18013-7:2025 Annex C
Digital Credentials API
Browser-mediated credential presentation aligned with the W3C Digital Credentials API Working Draft and the relevant ISO 18013-7 profile.
Annexes sold individually or as a full ISO 18013-7 bundle. Contact us to configure your licensing.
Core Benefits
Built for Server Side Verification
✓
Multiple credential protocols through one server product surface, with capabilities reported by format
✓
No hosted API by ONEPROOF you deploy the SDK in your own infrastructure
✓
ISO 18013-7 implementation
✓
OID4VP interoperability with the broader wallet ecosystem
✓
Customer-controlled deployment and application retention policy
✓
OEM and white label no ONEPROOF branding in your verification flow
Use Cases
Where the Server SDK Deploys
Financial Services
Online Identity Verification at Onboarding
Verify customer identity during digital onboarding using ISO 18013-7 online protocols. Cryptographic assurance without document uploads or biometric scans. Wallet to server credential presentation.
Age Restricted Commerce
Server Side Age Verification
Verify age attributes from compatible mobile wallets during checkout or account creation. Request an age threshold instead of a full credential when the use case allows it.
Government & Enterprise Portals
Credential Verification at Service Entry
Government agencies and enterprise portals can integrate ISO 18013-7 credential verification at service authentication points replacing password based or knowledge based authentication.
Technical Specifications
Platform Specifications
Protocols & FormatsISO mdoc, ISO 18013-7, OpenID4VP, W3C DC API, ICAO Doc 9303, MiDNI signed QR, AAMVA PDF417
SDK TypeServer side SDK you deploy in your infrastructure
LicensingPer-annex or full ISO 18013-7 bundle
Hosted APINone ONEPROOF does not host a public verification endpoint
OEMFull white label no ONEPROOF branding
PrivacySupports selective disclosure and customer-controlled retention
DeploymentOn Premise
Add multi-protocol credential verification to your server infrastructure.
Match the credential formats and presentation protocols to your use case. All engagements are enterprise qualified.
Request Access