multipaz
0.99.0indexedLibrary suite and tools for issuing, presenting, and verifying mDL/VC credentials using ISO mdoc, SD‑JWT, W3C Digital Credentials, OpenID4VP, and zero-knowledge proof integration.
281
Stars
—
Used by
dependents
79
Health
/ 100
Library suite and tools for issuing, presenting, and verifying mDL/VC credentials using ISO mdoc, SD‑JWT, W3C Digital Credentials, OpenID4VP, and zero-knowledge proof integration.
This repository contains libraries and applications for working with real-world identity. The initial focus for this work was mdoc/mDL according to ISO/IEC 18013-5:2021 and related standards but the current scope also include other credential formats and presentment protocols.
The project provides libraries written in Kotlin Multiplatform:
multipaz provides the core building blocks. It works on Android,
iOS, and in server-side environments. The library includes support
for ISO mdoc and IETF SD-JWT VC credential formats and also implements
proximity presentment using ISO/IEC 18013-5:2021 (for ISO mdoc credentials)
and presentment to applications using the W3C Digital Credentials API
according to ISO/IEC 18013-7:2025 and OpenID4VP 1.0.multipaz-compose provides rich UI elements to be used in Compose
applications.multipaz-utopia contains document and transaction data types specific
to the Multipaz Utopia universe.multipaz-doctypes contains standardized document and transaction data
types (including ISO/IEC 18013-5:2021 mDL and EU PID) along with human-readable
descriptions of claims / data elements, sample data, and sample requests.multipaz-longfellow bundles the Google Longfellow-ZK library
and integrates with the core multipaz for Zero-Knowledge Proofs
according to latest available ISO/IEC 18013-5 Second Edition draft.multipaz-swiftui contains SwiftUI components which can be used in
Swift applications.A command-line tool multipazctl is also included which can be used to generate
ISO/IEC 18013-5:2021 IACA certificates among other things. Use
./gradlew --quiet runMultipazCtl --args "help" for documentation on supported
verbs and options. To set up a wrapper, first build the fat jar
$ ./gradlew multipazctl:buildFatJar
then create a wrapper like this
#!/bin/sh
MAIN_CLASS="org.multipaz.multipazctl.MultipazCtl"
CLASSPATH="/Users/davidz/StudioProjects/identity-credential/multipazctl/build/libs/multipazctl-all.jar"
JVM_OPTS="-Xms256m -Xmx512m"
exec java $JVM_OPTS -cp "$CLASSPATH" "$MAIN_CLASS" "$@"
in e.g. ~/bin/multipazctl adjusting paths as needed. With this you can now
invoke multipazctl like any other system tool.
Libraries are released on Maven Central usually every 4-8 weeks. Releases up until and including 0.97.0 can be found on GMaven. Semantic Versioning is used. At this time we're in pre-1.0 territory but we expect to hit 1.0 around late 2026 or early 2027.
We are also making Multipaz available as a Swift package
which includes the multipaz, multipaz-doctypes,
multipaz-longfellow, and multipaz-swiftui libraries. This is built using
SKIE. Be careful relying on this as Swift/Kotlin interop technology
might change in the near future with e.g. .
At this point both API interfaces and data stored on disk are subject to change
but we expect to provide stability guarantees post 1.0. We only expect minor changes
for example conversion from ByteArray to ByteString and similar things.
Snapshot builds of the latest development version are automatically published to the Sonatype Central Snapshots repository on every push to the main branch.
To use snapshot builds in a project consuming Multipaz:
Add the Sonatype Snapshots repository to your project's settings.gradle.kts file:
dependencyResolutionManagement {
repositories {
google()
mavenCentral()
maven {
url = uri("https://central.sonatype.com/repository/maven-snapshots/")
}
}
}
[!TIP] By default, Gradle caches snapshots for 24 hours. To force Gradle to check for and download the latest snapshot immediately when doing a project sync, add the following to your top-level
build.gradle.kts:subprojects { configurations.all { resolutionStrategy.cacheChangingModulesFor(0, "seconds") } }Alternatively, you can run Gradle with the
--refresh-dependenciesflag (e.g., ) to update cached snapshots on demand.
This project uses Kotlin Multiplatform (KMP) JS and Wasm targets. NPM dependency versions are pinned in kotlin-js-store/yarn.lock and kotlin-js-store/wasm/yarn.lock to ensure build reproducibility.
To upgrade the locked package versions (e.g., to address Dependabot vulnerability alerts):
We have resources for people already involved and people wishing to contribute to the Multipaz project
Note: If you're just looking to use the Multipaz libraries you do not need to build the entire Multipaz project from source. Instead, just use our released libraries, see the next section for an example of this.
For a fully-fledged mDL wallet, our current answer is to use the samples/testapp
module which works on both Android and iOS. This application is intended for
developers and as such has a lot of options and settings. It's intended to
exercise all code in the libraries. Prebuilt APKs are available from
https://apps.multipaz.org.
For a SwiftUI version of samples/testapp see samples/SwiftTestApp which works
on iOS and is a testbed for the Swift bindings as well as the SwiftUI components
in multipaz-swiftui.
For a fully-featured proximity reader app using Multipaz, see MpzIdentityReader. Prebuilt APKs are available from https://apps.multipaz.org.
For an over-the-Internet verifier supporting OpenID4VP (both W3C DC API and URI schemes) and ISO/IEC 18013-7 Annex A and C see https://verifier.multipaz.org.
To see how to use Multipaz in a 3rd party project, see https://github.com/openwallet-foundation/multipaz-samples/ which includes a number of samples for different platforms.
developer.multipaz.org is a comprehensive resource for developers. The entire developer website is open source and contributions are welcome!
This is not an official or supported Google product.
Reference the snapshot version of the library in your module's build.gradle.kts dependencies block. For example if the latest release version is 0.99.0 you can consume snapshots leading up to the next release in the following way:
dependencies {
implementation("org.multipaz:multipaz:0.100.0-SNAPSHOT")
}
./gradlew build --refresh-dependenciesClean intermediate Gradle build artifacts:
$ ./gradlew clean
Generate the initial NPM workspaces:
$ ./gradlew kotlinUpgradeYarnLock kotlinWasmUpgradeYarnLock
Upgrade npm package versions using Yarn:
$ cd build/js && npx yarn upgrade
$ cd ../wasm && npx yarn upgrade
$ cd ../..
Persist the updated lockfiles to the repository store:
$ ./gradlew kotlinUpgradeYarnLock kotlinWasmUpgradeYarnLock
multipaz-compose, multipaz-doctypes, and multipaz-utopia (AI-assisted translation and validation).Surfaced from shared tags and platforms — no rankings paid for.