Paradym
for LuumenAI
Issue and verify credentials in Paradym, with every change previewed first
Connect Paradym and the agent can read your credential templates, DIDs, DIDComm connections, and issuance or verification sessions while you work. Ask why a session stalled, or which template a holder was offered. When something needs to change — a new credential offer, a verification request, an archived template — the agent shows the call and waits for your approval. Authentication is by API key.
The Paradym toolbox
69 tools: 34 read, 35 write. Reads answer instantly. Writes require approval by default. Everything is logged.
- ReadGet AnonCreds Credential TemplateRetrieve a specific AnonCreds credential template by ID.
- ReadGet AnonCreds Credential Template JSON SchemaRetrieve the JSON schema for an AnonCreds credential template.
- ReadGet DIDComm ConnectionRetrieve a specific DIDComm connection by ID.
- ReadGet DIDComm ConnectionsRetrieve a list of DIDComm connections for a project.
- ReadGet DIDComm InvitationRetrieve a specific DIDComm invitation by ID.
- ReadGet DIDComm Issuance SessionRetrieve a specific DIDComm issuance session by ID.
- ReadGet DIDsRetrieve a list of Decentralized Identifiers (DIDs) for a specific project.
- ReadGet mDoc Credential TemplateRetrieve a specific mDoc credential template by ID.
- ReadGet mDoc Credential Template JSON SchemaRetrieve the JSON schema for an mDoc credential template.
- ReadGet OpenID4VC Issuance SessionRetrieve a specific OpenID4VC issuance session by ID.
- ReadGet OpenID4VC Verification SessionRetrieve a specific OpenID4VC verification session by ID.
- ReadGet Presentation TemplateRetrieve a specific presentation template by ID.
- ReadGet Presentation TemplatesRetrieve a list of presentation templates for a project.
- ReadGet Project MembersRetrieve a list of project members.
- ReadGet Project ProfileRetrieve the default profile for a project.
- ReadGet ProjectsRetrieve a list of all projects accessible to the authenticated user.
- ReadGet Project WebhooksRetrieve a list of webhooks configured for a specific project.
- ReadGet SD-JWT VC Credential TemplateRetrieve a specific SD-JWT VC credential template by ID.
- ReadGet SD-JWT VC Credential Template JSON SchemaRetrieve the JSON schema for an SD-JWT VC credential template.
- ReadGet Trusted EntitiesRetrieve trusted entities for a specific project.
- ReadGet Trusted EntityRetrieve a specific trusted entity by ID.
- ReadList AnonCreds Credential TemplatesRetrieve all AnonCreds credential templates for a project.
- ReadList CertificatesRetrieve all X.509 certificates for a project.
- ReadList Certificate Signing RequestsRetrieve all certificate signing requests for a project.
- ReadList DIDComm InvitationsRetrieve all DIDComm invitations for a project.
- ReadList DIDComm Issuance OffersList all DIDComm issuance offers within a project.
- ReadList DIDComm Mediator ConnectionsRetrieve connections for a DIDComm mediator.
- ReadList DIDComm MediatorsRetrieve all DIDComm mediators for a project.
- ReadList DIDComm Verification RequestsList all DIDComm verification sessions for a project.
- ReadList Issued CredentialsList metadata for all issued credentials within a project.
- ReadList mDoc Credential TemplatesRetrieve all mDoc credential templates for a project.
- ReadList OpenID4VC Issuance SessionsRetrieve all OpenID4VC issuance sessions for a project.
- ReadList OpenID4VC Verification SessionsRetrieve all OpenID4VC verification sessions for a project.
- ReadList SD-JWT VC Credential TemplatesRetrieve all SD-JWT VC credential templates for a project.
- WriteActivate CertificateActivate a certificate for use in a project. Approval by default
- WriteArchive AnonCreds Credential TemplateArchive an AnonCreds credential template in a project. Approval by default
- WriteArchive mDoc Credential TemplateArchive an mDoc credential template. Approval by default
- WriteArchive Presentation TemplateArchive a presentation template in a project. Approval by default
- WriteArchive SD-JWT VC Credential TemplateArchive an SD-JWT VC credential template in a project. Approval by default
- WriteCreate AnonCreds Credential TemplateCreate a new AnonCreds credential template. Approval by default
- WriteCreate CertificateCreate a new self-signed X.509 certificate for a project. Approval by default
- WriteCreate DIDComm Connection InvitationCreate a DIDComm connection invitation. Approval by default
- WriteCreate DIDComm Issuance OfferCreate a DIDComm credential issuance offer. Approval by default
- WriteCreate OpenID4VC Credential OfferCreate an OpenID4VC credential offer. Approval by default
- WriteCreate OpenID4VC Verification RequestCreate an OpenID4VC verification request. Approval by default
- WriteCreate Presentation TemplateCreate a new presentation template. Approval by default
- WriteCreate Project WebhookCreate a new webhook for a project. Approval by default
- WriteCreate SD-JWT VC Credential TemplateCreate a new SD-JWT VC credential template with selective disclosure capabilities. Approval by default
- WriteCreate Trusted EntityCreate a new trusted entity for a project. Approval by default
- WriteDeactivate CertificateDeactivate a certificate in a project. Approval by default
- WriteDelete DIDComm ConnectionDelete a DIDComm connection from a project. Approval by default
- WriteDelete DIDComm InvitationDelete a DIDComm invitation from a project. Approval by default
- WriteDelete Trusted EntityDelete a trusted entity from a project. Approval by default
- WriteDelete Project WebhookDelete a webhook endpoint from a project. Approval by default
- WriteIssue Direct SD-JWT VCDirectly issue an SD-JWT VC credential without exchange protocol. Approval by default
- WriteReceive DIDComm InvitationReceive and process an external DIDComm invitation. Approval by default
- WriteRevoke CertificateRevoke a certificate in a project. Approval by default
- WriteSend DIDComm Basic MessageSend a basic DIDComm message to a connection. Approval by default
- WriteSend Custom DIDComm MessageSend a custom DIDComm message to a connection. Approval by default
- WriteUnarchive AnonCreds Credential TemplateUnarchive an archived AnonCreds credential template. Approval by default
- WriteUnarchive mDoc Credential TemplateUnarchive an archived mDoc credential template. Approval by default
- WriteUnarchive SD-JWT VC Credential TemplateUnarchive an archived SD-JWT VC credential template. Approval by default
- WriteUpdate DIDComm ConnectionUpdate a DIDComm connection. Approval by default
- WriteUpdate mDoc Credential TemplateUpdate an existing mDoc credential template. Approval by default
- WriteUpdate Presentation TemplateUpdate an existing presentation template. Approval by default
- WriteUpdate ProjectUpdate an existing project's name and verification data access settings. Approval by default
- WriteUpdate Project ProfileUpdate the default profile for a project. Approval by default
- WriteUpdate SD-JWT VC Credential TemplateUpdate an existing SD-JWT VC credential template. Approval by default
- WriteUpdate Trusted EntityUpdate an existing trusted entity in a project. Approval by default
One prompt, start to finish
What a governed Paradym run looks like inside Luumen.
Questions
How does LuumenAI connect to Paradym?
Authorize once with API token. Luumen lists the scopes each action needs before you approve the connection, and credentials never appear in the chat.
Can LuumenAI change things in Paradym on its own?
Read actions answer immediately. Anything that writes — activate certificate, archive anoncreds credential template, archive mdoc credential template, archive presentation template, and more — is shown as a plan and requires approval by default, including the 9 actions classified as destructive. Administrators configure that per tool, so you decide exactly which actions can ever run unattended.
Who gets access to the integration?
You decide. Actions are granted per agent, skill, and team, and per environment — production is not staging. Read access can be broad while writes stay narrow.
Is there an audit trail?
Every call to Paradym — read or write, approved or declined — is recorded with the actor, the input, and the result, and can be linked to the ticket or change record.
Often connected alongside
All integrations
OktaAccess and posture from Okta, with approval on every change.
Microsoft Entra IDAccess and posture from Microsoft Entra ID, with approval on every change.
Auth0Access and posture from Auth0, with approval on every change.Ping IdentityAccess and posture from Ping Identity, with approval on every change.Put Paradym to work with Luumen
Connect in minutes. Every action scoped, approved, and audited from day one.