User Guide

This guide covers everything you need as a VeriSwarm account holder — registering, claiming agents, understanding trust scores, and managing your account.

Getting started

Create an account

Sign up from the authentication page with your email, display name, and password.

Once registered, you can:

• Verify your email to strengthen your identity evidence
• Claim ownership of agents
• Enable provider mode for API access

Sign in

Log in with your email and password. If you have MFA enabled, you will be prompted for your code. After login, you are taken to your account console.

Claim or register an agent

From the onboarding page, you can:

• Create a new agent profile
• Attach ownership evidence
• Link the agent to your account

This is how you move an agent from anonymous presence to verified, attributable ownership.

Your account console

The account console is your home base. It shows:

• Your identity and verification status
• MFA status
• All agents you own
• Provider controls (if provider mode is enabled)

Reviewing your agents

Each claimed agent displays:

• Display name and slug
• Created date
• Current policy tier
• Identity, risk, and reliability scores

Watch this page for agents drifting toward review or deny states so you can act before access is restricted.

Workspace and Team Management

Your account belongs to one or more workspaces (tenants). Each workspace is an isolated environment with its own agents, API keys, integrations, and billing.

• Switch workspaces from the account console if you belong to multiple teams
• Invite team members to your workspace with role-based access (owner, admin, member)
• Remove members or change roles from the team settings page
• API keys, billing, and usage are scoped to the active workspace

See the Integration Guide for the full integration walkthrough.

Core concepts

Your account

Your account is the human identity behind your agents. It lets you:

• Prove ownership across multiple agents
• Raise identity confidence for every agent you claim
• Access provider mode and API key management

Agent ownership

Claiming an agent links it to your verified identity. This:

• Improves trust evidence
• Makes the agent easier to audit
• Helps platforms distinguish maintained agents from anonymous or abandoned ones

Email verification

Verifying your email strengthens your identity evidence. Without it, your account still works, but carries less weight in trust calculations.

MFA

MFA is optional but recommended, especially if you manage API keys or access operational trust data.

Setup steps:

1. Go to Account > Settings > Security
2. Click Enable MFA -- you will receive a QR code and a secret key
3. Scan the QR code with your authenticator app (Google Authenticator, Authy, 1Password, etc.)
4. Enter the 6-digit code from your authenticator to confirm setup
5. Save your recovery codes in a secure location -- these are your backup if you lose access to your authenticator

Once enabled, you will be prompted for a code on every login. Recovery codes can be regenerated from the MFA settings page.

Understanding trust scores

VeriSwarm computes four scores for every agent — identity, risk, reliability, and autonomy — which together determine the agent's policy tier.

Identity score

How confident VeriSwarm is that an agent is attributable to a known owner.

Improved by:

• Human ownership claims
• Verified domains
• Stronger attestation evidence

Risk score

How likely an agent is to behave in ways that warrant restriction.

Raised by:

• Policy violations
• Abuse reports
• Suspicious or harmful behavior patterns

Reliability score

How consistently an agent operates without incidents.

Affected by:

• Event history
• Incident volume
• Recent behavioral stability

Policy tier

The actionable output of scoring. Determines whether an agent's actions are allowed, sent to review, or denied. This is what platforms use to make real-time trust decisions.

• Strong trust — normal operations allowed
• Mid trust — actions may require review
• Low trust — actions may be limited or denied

What to keep an eye on

• Email verification and MFA status
• Whether your agents are still linked to your account
• Policy tier changes
• Sudden increases in risk score

Any of these shifting unexpectedly may indicate a trust issue worth investigating.

Related guides

• Integration Guide
• API Reference
• Gate — Scoring Engine