A Universal Trust Layer for the Open Internet
OMATrust is a decentralized verification protocol that enables developers, auditors, and users to create machine-verifiable trust signals for apps, APIs, websites, and smart contracts. Built by OMA3, a Swiss non-profit consortium, OMATrust provides the foundation for a verifiable, AI-ready internet.
- License terms
- Contributor terms are defined in CONTRIBUTING.md
- Whitepaper - Vision, architecture, and economic model
- Specification - Technical specification for OMATrust protocol
- DID Artifact Method Spec - W3C-format DID method specification
OMATrust follows a modular architecture where each repository serves a specific function:
| Repository | Purpose | Status |
|---|---|---|
| omatrust-docs | Whitepaper, specification, and protocol documentation | Active |
| developer-docs | Developer-facing documentation site (Docusaurus) | Active |
| app-registry-frontend | Web interface for registering applications | Active |
| rep-attestation-frontend | Web interface for submitting and viewing attestations | Active |
| omatrust-backend | Backend service for account, subscription, and delegated flows | Active |
| omatrust-api-gateway | API gateway for OMATrust services (Vercel serverless) | Active |
| omatrust-widgets | Embeddable trust signal components | Active |
| omatrust-sdk | Framework-agnostic TypeScript SDK (@oma3/omatrust) |
Active |
| omatrust-landing | Public marketing / landing page | Active |
| app-registry-evm-solidity | Smart contracts for app registration and tokenization | Active |
| rep-attestation-tools-evm-solidity | Attestation schemas and tools for reputation system | Active |
| oma3-ops | Operational tooling, deployment scripts, governance config | Active |
| Repository | Reason |
|---|---|
app-metadata-evm-solidity |
Legacy metadata contract. Functionality merged into app-registry-evm-solidity. |
Registration: Developers use the app-registry-frontend to register applications, which creates tokens via app-registry-evm-solidity contracts.
Reputation: Users and auditors submit reviews/certifications through rep-attestation-frontend, using schemas from rep-attestation-tools-evm-solidity.
Backend: The omatrust-backend handles account management, subscriptions, and delegated attestation flows. The omatrust-api-gateway routes API calls to backend services.
SDK & Widgets: The omatrust-sdk provides a TypeScript SDK for integrating OMATrust into any application. The omatrust-widgets package provides embeddable UI components for displaying trust signals.
Verification: Applications can query both systems to display trust signals to users.
Governance: Branch protection rulesets and CI configuration are managed centrally in oma3-ops/github-governance/.
Register your applications for verification:
- Apps include websites, binaries, mobile apps, APIs, MCP servers, and even agents (see the specification for details)
- Visit registry.omatrust.org to tokenize your app, API, or website
- Review the registry frontend repository for integration examples
- See the Specification for supported application types and metadata requirements
- If you work with an audit firm (SOC 2, pen testing, etc.), encourage them to participate in OMATrust to make your audits verifiable and discoverable
Integrate review prompts into your applications:
- Embed OMATrust review widgets or SDK tools to encourage user endorsements
- Integration tools and SDKs coming soon
Integrate trust information into your clients:
- Query OMATrust to verify legitimacy before using a service
- Retrieve attestations and reviews for trust scoring
- Tooling and SDKs for client integration coming soon
Review attestation schemas and use the reputation frontend to publish cryptographic attestations.
Visit verify.omatrust.org to search verified applications, submit reviews, and verify website legitimacy.
- Coming soon
Current Phase: Pre-launch development
- Core contracts implemented
- Specification complete
- Frontend applications functional
- OMAChain deployment in progress
- Public launch: Q4 2025
OMATrust is open source and welcomes contributions:
- Join OMA3 - Become a consortium member to participate in governance and create standards
- Submit Issues - Report bugs or suggest improvements in relevant repositories
- Contribute Code - Follow contribution guidelines in each repository
- Provide Feedback - Share thoughts on specifications and protocols
- Documentation: docs.omatrust.org
- Twitter: @oma3dao
- LinkedIn: Home Page
Documents in this repository are licensed under CC BY 4.0. Code repositories have their own licenses - see individual repositories for details.
Building the trust layer of the open internet.