> ## Documentation Index
> Fetch the complete documentation index at: https://docs.domesystems.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Verification Providers

> Manage OIDC and HMAC verification providers for act-as identity

Verification provider tools manage the identity providers used to verify act-as claims. When an agent presents an end-user identity (act-as), Dome uses these providers to validate the claim via OIDC token verification or HMAC signature checking. These 3 tools require workspace context.

## Verification Providers List

`dome_verification_providers_list`

List verification providers configured in the current workspace.

| Parameter | Type | Required | Description   |
| --------- | ---- | -------- | ------------- |
| —         | —    | —        | No parameters |

**Permission:** `config.manage`

Returns each provider with its ID, name, verification method, and configuration details.

```json title="Example tool call" theme={"system"}
{
  "name": "dome_verification_providers_list"
}
```

## Verification Providers Create

`dome_verification_providers_create`

Create a new verification provider.

| Parameter            | Type   | Required    | Description                                                |
| -------------------- | ------ | ----------- | ---------------------------------------------------------- |
| `name`               | string | Yes         | Provider name                                              |
| `method`             | string | Yes         | Verification method: `oidc` or `hmac`                      |
| `oidc_discovery_url` | string | Conditional | OIDC issuer discovery URL (required when method is `oidc`) |
| `hmac_secret`        | string | Conditional | HMAC shared secret (required when method is `hmac`)        |

**Permission:** `config.manage`

```json title="Example — OIDC provider" theme={"system"}
{
  "name": "dome_verification_providers_create",
  "arguments": {
    "name": "google-workspace",
    "method": "oidc",
    "oidc_discovery_url": "https://accounts.google.com/.well-known/openid-configuration"
  }
}
```

```json title="Example — HMAC provider" theme={"system"}
{
  "name": "dome_verification_providers_create",
  "arguments": {
    "name": "internal-signer",
    "method": "hmac",
    "hmac_secret": "your-shared-secret"
  }
}
```

<Info>
  After creating a provider, reference it in agent registration with the `actas_method` and provider ID to enable act-as verification for that agent.
</Info>

## Verification Providers Delete

`dome_verification_providers_delete`

Delete a verification provider.

| Parameter     | Type   | Required | Description           |
| ------------- | ------ | -------- | --------------------- |
| `provider_id` | string | Yes      | Provider ID to delete |

**Permission:** `config.manage`

<Warning>
  Deleting a provider breaks act-as verification for any agents referencing it. Update or remove agent verification configs before deleting the provider.
</Warning>

## Next steps

Configure providers on delegated agents, then pass Act-As from the app:

* [Delegated agents](/connect/agents/delegated)
* [Identity Patterns](/concepts/identity-patterns) concept
* [Pass identity for delegated agents](/develop#pass-identity-for-delegated-agents)