Usage

First-Time Setup: Configure Credentials

Configure the following two credentials before use:

Field	Description	How to obtain it
userid	Current user ID, used for 1:1 comparison	Sign in to the developer console and view your profile
token	JWT for API authentication	Apply at https://palm.tencent.com/developer/api-keys

Provide the credentials directly to the AI in the conversation. For example:

"Help me configure the palm-kyc-community credentials. The userid is xxx and the token is xxx."

The AI securely writes the credentials to local credential storage and does not write their values to shell history or logs.

Credentials are stored in the system Keychain whenever possible. If the Keychain is unavailable, they are stored in a local encrypted file.

Palm Scan Recognition

1. The user initiates a risky operation in the conversation, such as "Delete all user data."
2. The AI automatically detects the risky keyword and starts the Palm Scan Recognition process.
3. The system opens a separate Chrome pop-up window, where the user completes the Palm Scan in front of the camera.
4. The AI determines the next action based on the verification result:
   • ✅ Passed: Continue the original operation.
   • ❌ Failed: Terminate the original operation without retrying.
   • ⚠️ Timeout/Error: Ask the user to initiate the operation again.

Palm Registration

1. The user explicitly says a registration phrase, such as "I want to register my palm."
2. The AI starts the Palm Registration process and opens a separate Chrome pop-up window.
3. The user follows the on-screen prompts to capture the palm print in front of the camera.
4. The AI reports the registration result:
   • ✅ Succeeded: Return the PalmId.
   • ❌ Failed: Return the error message and error code; the operation can be retried.
   • ⚠️ Timeout/Error: Ask the user to initiate the operation again.