mwen.io Documentation

Welcome to the mwen.io documentation. Choose a section based on what you want to do.

---

Your Mwen Identity

For people who want to create and use a mwen.io identity.

• What is mwen.io? — how sovereign identity works and why it's different
• Your identity key — the 24-word phrase that controls your identity
• Creating your identity — step-by-step setup guide
• Unlocking your wallet — biometric and password unlock
• Signing in to apps — the consent screen and what you're sharing
• Connected apps — viewing and revoking app connections
• Backup and restore — exporting and importing your .mwen file
• Changing your password — re-encrypting your wallet
• Recovery — options when you lose access
• Privacy and security — what is stored where, and how your data is protected
• Receiving credentials — how to accept a credential offer from an organisation
• Your credentials — viewing credentials and understanding trust badges
• Credential revocation — what it means when a credential is revoked

---

Developers

mwen.io has two distinct developer audiences. See Developers to choose the right section for your role.

Verifier developers

For developers integrating Sign in with mwen.io into their application using @mwen/js-sdk.

• Verifying Credentials with mwen.io — trust model, what your app receives, core concepts
• Quickstart — React/Next.js integration in four steps
• SDK reference — complete API reference for all entry points
• Configuration — every MwenClientConfig option documented
• Scopes and claims — what each scope provides and how to read claims
• Handling sessions — session lifecycle, auto-refresh, cross-tab revocation
• Verifying credentials — server-side verification with verifyAccessTokenFromHeader
• Revocation — implementing the revocation endpoint and handling revoked sessions
• Async attestations — relay endpoints for background credential delivery
• Framework-agnostic usage — using MwenClient directly with Vue, Svelte, or plain JS
• Issued credentials — reading trust_level, issuerCategory, and issuerDID from the access token

Issuer developers

For organisations that want to issue verifiable credentials to their users' wallets — government agencies, employers, universities, and learning platforms.

• Overview — what the issuer does, who it's for, trust levels
• Quickstart — get running and issue a credential in under ten minutes
• Deployment modes — self-hosted vs SaaS: when to choose each
• Issuer verticals — government, employer, academic, learning platform
• Getting started — full setup walkthrough for self-hosted mode
• Configuration — environment variables, YAML config, merge priority
• SaaS tenant onboarding — creating tenants, domain verification, provisioning
• Credential schemas — the 11 built-in schema templates
• API key management — creating API keys and integrating with third-party platforms
• Revocation — revoking individual credentials and batch revocation