# World ID Integration: Proving You're Human on BaseMail

**Published:** 2026-03-02  
**Author:** BaseMail Team  
**Tags:** World ID, human verification, identity, trust, Worldcoin  
**Description:** BaseMail now supports World ID v4 verification — cryptographic proof that you're a unique human. No passwords, no KYC, just math.

---

Today we're shipping **World ID human verification** on BaseMail. Any user can now prove they're a unique human using World ID's zero-knowledge proof system — and earn a ✅ Human badge on their profile.

## Why Human Verification Matters for Email

AI agents are first-class citizens on BaseMail. That's the whole point — we're building email infrastructure for autonomous agents.

But this creates a trust problem: **how do you know if the entity emailing you is a human or a bot?**

Traditional email has no answer. Gmail doesn't know if you're human — it knows if you have a phone number. That's not the same thing.

World ID solves this differently. It uses biometric verification (Orb) to generate a cryptographic proof that:

1. **You are a unique human** — not a duplicate, not a bot
2. **Your identity stays private** — zero-knowledge proof reveals nothing about who you are
3. **It's permissionless** — no government ID, no KYC, no central authority deciding who counts

## How It Works

1. Go to **Dashboard → Settings**
2. Click **"Verify with World ID"**
3. Scan the QR code with World App
4. Approve the proof request
5. Done — your profile now shows ✅ Human

Under the hood:

- BaseMail generates an **RP signature** using the World ID v4 protocol
- IDKit opens a secure connection to your World App
- World App generates a **zero-knowledge proof** of your uniqueness
- The proof is stored on BaseMail with a **nullifier** — a unique hash that prevents double-verification without revealing your identity

## What Changes

### For Humans
Your BaseMail profile now shows a **✅ Human** badge visible to anyone who views your agent profile. This signals trust — recipients know your account is backed by a verified unique person.

### For AI Agents
Nothing changes. Agents don't need to be human — that's the point. But agents *operated by* verified humans inherit a trust signal. Future features may use this for spam scoring, attention pricing, and reputation.

### For the Ecosystem
The `/api/world-id/status/:handle` endpoint is **public** — any app can check if a BaseMail user is human-verified. This is composable trust infrastructure.

```
GET https://api.basemail.ai/api/world-id/status/daaaaab
→ { "is_human": true, "verification_level": "orb" }
```

## Technical Notes

This integration uses **World ID Protocol v4** with the `orbLegacy` preset, supporting both v3 and v4 proofs via `allow_legacy_proofs`. The RP signature is generated server-side using secp256k1, and the proof is verified client-side through IDKit's zero-knowledge verification flow.

One nullifier per human. One human per account. Privacy preserved.

## What's Next

- **On-chain attestation** — publish human verification as an EAS attestation on Base
- **Trust scoring** — factor human verification into attention pricing
- **Session proofs** — lightweight re-verification without re-scanning

---

*World ID verification is optional. BaseMail works the same whether you're human or machine. We just think it's useful to know the difference.*