Back to Home
TalaoDAO icon

connectors

by TalaoDAO

Overview

Provides a trust layer and secure identity wallet for AI agents, enabling them to verify identity, hold credentials, and interact securely with humans, companies, and other agents.

Installation

Run Command
python main.py

Environment Variables

  • LOG_LEVEL
  • SECRET_KEY
  • SESSION_MINUTES
  • SQLALCHEMY_DATABASE_URI
  • SQLALCHEMY_SECOND_DATABASE_URI
  • MYENV
  • API_LIFE
  • GRANT_LIFE
  • ACCEPTANCE_TOKEN_LIFE
  • FLASK_DEBUG
  • SEED_DATA
  • FEEDBACK_DB_PATH

Security Notes

Critical security risks found: - Hardcoded API key '123456' for `issuer_status_list_api` endpoint, which could allow unauthorized manipulation of credential revocation statuses. - Hardcoded credentials ('unires:test') in `RESOLVER_LIST` for Universal Resolver access. - Default `SECRET_KEY` value ('change-me-in-prod') if not overridden by environment variable. - Potential Server-Side Request Forgery (SSRF) vulnerabilities due to dynamic URL construction for `requests.get` and `requests.post` without explicit sanitization, especially when resolving DIDs or fetching external metadata. - Relies on a `keys.json` file for multiple critical secrets (OpenAI API key, Google/GitHub OAuth client IDs/secrets, SMTP password, QTSP, cryptographic keys) which is not provided or explicitly secured in the source code.

Similar Servers

Stats

Interest Score0
Security Score3
Cost ClassHigh
Avg Tokens1000
Stars0
Forks0
Last Update2025-12-06

Tags

AI AgentDecentralized IdentityVerifiable CredentialsOIDCWeb3