Verification Providers - Dome

Verification provider tools manage the identity providers used to verify act-as claims. When an agent presents an end-user identity (act-as), Dome uses these providers to validate the claim via OIDC token verification or HMAC signature checking. These 3 tools require workspace context.

Verification Providers List

dome_verification_providers_list List verification providers configured in the current workspace.

Parameter	Type	Required	Description
—	—	—	No parameters

Permission: config.manage Returns each provider with its ID, name, verification method, and configuration details.

Example tool call

{
  "name": "dome_verification_providers_list"
}

Verification Providers Create

dome_verification_providers_create Create a new verification provider.

Parameter	Type	Required	Description
`name`	string	Yes	Provider name
`method`	string	Yes	Verification method: `oidc` or `hmac`
`oidc_discovery_url`	string	Conditional	OIDC issuer discovery URL (required when method is `oidc`)
`hmac_secret`	string	Conditional	HMAC shared secret (required when method is `hmac`)

Permission: config.manage

Example — OIDC provider

{
  "name": "dome_verification_providers_create",
  "arguments": {
    "name": "google-workspace",
    "method": "oidc",
    "oidc_discovery_url": "https://accounts.google.com/.well-known/openid-configuration"
  }
}

Example — HMAC provider

{
  "name": "dome_verification_providers_create",
  "arguments": {
    "name": "internal-signer",
    "method": "hmac",
    "hmac_secret": "your-shared-secret"
  }
}

After creating a provider, reference it in agent registration with the actas_method and provider ID to enable act-as verification for that agent.

Verification Providers Delete

dome_verification_providers_delete Delete a verification provider.

Parameter	Type	Required	Description
`provider_id`	string	Yes	Provider ID to delete

Permission: config.manage

Deleting a provider breaks act-as verification for any agents referencing it. Update or remove agent verification configs before deleting the provider.

Next steps

Configure providers on delegated agents, then pass Act-As from the app:

⌘I