How SkillAuthor works.

SkillAuthor records the exact bytes of your .mdc file, computes a SHA-256 hash, and timestamps the moment of registration. After successful payment, we issue a permanent certificate with a registration number and QR code.

The goal is simple: to create independent, cryptographic proof that a specific file existed at a specific moment — and that you claimed it.

What SkillAuthor is

SkillAuthor is the independent registry for AI Agent Skills (.mdc).

We provide cryptographic proof of authorship, a permanent public certificate with a QR code, and automatic near-duplicate protection.

What we guarantee

• Byte fidelity. The file you submitted is exactly what we hashed and recorded. Any change to the bytes — even a single character — produces a different SHA-256.
• Time anchoring. The timestamp on your certificate reflects the exact moment payment was confirmed (to the second, in UTC).
• Attribution snapshot. The name and email you provided at registration are recorded exactly as you typed them. We do not verify identity.

What SkillAuthor is not

• — We do not grant copyright, patents, or trademarks.
• — We do not assess novelty, originality, or usefulness.
• — We do not provide legal advice.

How verification works

Anyone can verify a registration independently using only the original .mdc file and the registration number:

shasum -a 256 your-skill.mdc

Compare the output with the SHA-256 fingerprint shown on the certificate and at https://skillauthor.com/v/<reg>. A match means the bytes are identical. A mismatch means the file has been modified.

The PDF certificate is self-contained — no internet connection or SkillAuthor infrastructure is required for verification. You can also use the verification lookup to search by registration number or SHA-256 hash.

Design choices

We made several deliberate decisions:

• No user accounts. Accounts would create unnecessary complexity and a credentials risk we don't want. The cryptographic hash is sufficient to anchor authorship.
• Semantic near-duplicate detection runs after registration. This feature is live. After every paid registration, we automatically run a semantic similarity check in the background (5–60 minutes later). If a strong match is found with an earlier registration, the original registrant receives an email with the new registrant's contact details.
• No mutability. Once a registration is issued, it cannot be edited. If your skill evolves, register a new version — each version gets its own number and certificate.

Current status (v1.0)

All core features are live:

• — SHA-256 hashing
• — UTC timestamping
• — Atomic registration numbering
• — Single $39 USD product
• — PDF certificate generation with QR code
• — Public verification
• — Semantic near-duplicate detection (live since May 2026)

On the roadmap (not yet built):

• — Signed JSON attestations
• — Hash-only private tier
• — Authenticated per-author API
• — Merkle-rooted ledger snapshots

We only announce features on the homepage once they are in production.