Pupul Identity

Sign in with Pupul.

Consented, scoped human identity for your app or agent. Gated by how a person types, not just what they know.

Try it yourself Read the docs

Patent application 64/048,624. The way you type is the password.

The problem nobody else solves

Every agent and app can check what a person knows: a password, a code, a token. Almost none can tell you who is actually present at the moment of consent. As agents act on people's behalf, the missing question becomes the only one that matters: was it really this specific human who authorized this, or a hijacked session?

Pupul answers it. A person carries a word and a mark. When they authorize your app, they type their phrase, and we verify the rhythm of their typing against their enrolled signature. You receive a scoped token that says, honestly, whether a real human's presence was confirmed.

Two verbs. That is the whole surface.

READ

Who is this person

Answers in, a compressed identity out: word, rhythm, force. The person consents to exactly which fields you receive, and nothing more.

VERIFY

Is it really them

A consent token carrying an honest presence label. Verified means their keystroke rhythm matched at the moment they authorized. Your app decides how much to trust it.

How it works

  1. The person has a read on file.

    They took the reading once at noctaracorp.com. Their word and rhythm are theirs.

  2. They enroll their keystroke rhythm.

    A few natural reps of their phrase. We store only a derived signature, never the phrase itself.

  3. Your app asks for a scoped grant.

    They type their phrase once to authorize. We verify presence and issue a scoped token.

  4. You verify the token.

    One call returns the consented claims plus an honest presence label. That is it.

See it work Integration docs

Build on it

Self-serve and instant. One request mints your credentials and you are integrating in the same sitting: no sales call, no waitlist, no approval step. First 1,000 reads a month are free per app, then the Developer plan is $49 a month and includes 25,000. Full prices and the four-step integration.

curl -X POST https://noctaracorp.com/api/oauth/register \
  -d '{"app_name":"My AI App","email":"you@yourapp.com",
       "redirect_uris":["https://yourapp.com/callback"]}'

This page said "Pupul Identity is in early access" until 2026-08-02 while the docs and the builder landing page both promised instant self-serve, and every "Request access" link in the estate pointed here. The docs were right. The lane is open.

Want the founder in the loop instead?

Optional, and no longer the way in. If you are building something unusual and want a design-partner conversation, say so here. Everyone else should just mint a key above.

Honest scope: keystroke presence is a v1 confidence signal, not a calibrated biometric. It raises confidence that a real, specific human authorized an action. Tokens always carry an honest presence label.