Why We're Open-Sourcing the Protocol Layer
The EU Digital Identity Wallet is coming. By December 2026, every EU member state must issue EUDI Wallets to their citizens under Regulation (EU) 2024/1183. Businesses that verify customer identities — from age-restricted e-commerce to financial KYC — will need to speak the OpenID4VP protocol to communicate with these wallets.
But here's the problem: there is no production-ready, open-source verification library for the Relying Party side.
The European Commission published a reference wallet app (the holder/citizen side), but not a reference implementation for businesses that need to verify credentials. Existing SSI toolkits like walt.id (Kotlin/JVM) and SpruceID (Rust) target generic use cases, not the specific EUDI Wallet Architecture Reference Framework.
We've been building eIDAS Pro — a managed identity verification platform — for the past year. During that work, we built a TypeScript implementation of the OpenID4VP verification protocol. Today, we're extracting that protocol layer and releasing it as OpenEUDI: a free, MIT-licensed SDK that any developer can use.
What OpenEUDI Is
OpenEUDI is a TypeScript library that handles the technical complexity of verifying EU Digital Identity Wallet credentials. It implements:
- OpenID4VP (Verifiable Presentations) — the protocol that EUDI Wallets use to share verified attributes
- SD-JWT VC verification — selective disclosure JSON Web Tokens for remote verification flows
- mdoc/mDL verification — CBOR-based mobile document format for proximity verification
- EU Trust List integration — certificate chain validation against member state trust services
- QR code session management — generate QR codes, track session state, receive results via Server-Sent Events
import { createVerifier } from '@openeudi/core';
const verifier = createVerifier({ mode: 'demo' });
const session = await verifier.createSession({
attributes: ['age_over_18']
});
console.log(session.qrCode); // Display to user
session.onVerified((result) => {
console.log(result.ageOver18); // true
});
What OpenEUDI Is Not
OpenEUDI is the protocol library, not the full production stack. To run live verifications against real EUDI Wallets (launching December 2026), you also need:
- A WRPAC certificate (Wallet Relying Party Access Certificate) from a qualified trust service provider
- Relying Party registration with a national authority
- Production infrastructure: rate limiting, monitoring, audit logging, SLA guarantees
That's what eIDAS Pro's managed service provides. The SDK handles the protocol; the managed service handles the infrastructure.
Think of it like PostgreSQL (free, open-source database engine) vs. a managed database service (hosted, monitored, backed up). Both have value. The open-source tool gets you started; the managed service gets you to production without operational overhead.
The Open Core Model
We believe the verification protocol should be open infrastructure — like HTTP libraries or TLS implementations. Everyone benefits when the protocol layer is transparent, auditable, and community-maintained.
Our business model is straightforward:
| Layer | Model | What It Includes |
|---|---|---|
| Protocol | Free, MIT license | OpenEUDI SDK, plugins, documentation |
| Infrastructure | Paid SaaS | Managed WRPAC, production API, dashboards, SLA, support |
This means:
- Developers can build and test verification flows for free
- Businesses that want managed compliance pay for the infrastructure
- The ecosystem benefits from a shared, auditable protocol implementation
- Security researchers can inspect the code that handles identity verification
What's Included
Core SDK (@openeudi/core)
The protocol library itself: OpenID4VP request/response handling, credential verification, session management, and EU trust list parsing.
E-Commerce Plugins
- WooCommerce plugin (GPL v3) — age verification at checkout
- Shopify app — Checkout UI Extension for identity verification
- JavaScript widget — embeddable verification for any website
Reference Server
A demo verification server with three modes:
- DEMO: auto-completes in 3 seconds for showcases
- MOCK: simulated wallet responses for testing
- TEST: full protocol compliance for integration testing
Documentation
Developer guides, API reference, integration tutorials, and a machine-readable EU compliance mapping (JSON) covering all 27 member states.
Built in Luxembourg
OpenEUDI is developed in Luxembourg, at the heart of Europe's fintech ecosystem. Luxembourg's strategic focus on digital identity, fintech, and regulatory compliance — combined with programmes like Fit 4 Start, LHoFT, and the SNCI — makes it the ideal base for building pan-European identity infrastructure.
Getting Started
The SDK is currently in development. You can:
- Star the repository on GitHub (coming soon) to get notified when it's published
- Try the live demo on our homepage to see the verification flow in action
- Join our newsletter for SDK release announcements
- Read the technical deep dive on how eIDAS verification works
What's Next
- Q2 2026: First public release of
@openeudi/coreon npm - Q3 2026: WooCommerce and Shopify plugins published
- Q4 2026: Production-ready release aligned with EUDI Wallet launch
- Ongoing: Community contributions, additional framework integrations, language bindings
We're building OpenEUDI in the open. If you're working on EUDI Wallet integration, identity verification, or EU regulatory compliance, we'd love to hear from you.
OpenEUDI is MIT-licensed and free forever. The eIDAS Pro managed service provides production infrastructure, WRPAC certificates, and SLA guarantees for businesses that need managed compliance.
Related Articles
OpenEUDI SDK Quickstart: Your First Verification in 5 Minutes
A step-by-step tutorial to install the OpenEUDI SDK, create a verification session, and handle the result — all in under 5 minutes using DEMO mode.
6 min read
Understanding OpenID4VP: The Protocol Behind EU Digital Identity Wallets
A technical deep dive into OpenID4VP — the verification protocol that EUDI Wallets use to share verified attributes with businesses. How it works, why it matters, and how OpenEUDI implements it.
12 min read
Share this article
Help others learn about eIDAS verification