Candy Machine v3

We are fully integrated into MetaPlex's Candy Machine v3 protocol to enable mint protection using Candy Guard.
Permissioning with Civic Pass & Candy Guard allows you to verify minters in real-time, evaluating every request to mint by your criteria, including:
conducting a bot check using CAPTCHA
checking for liveness and uniqueness
checking for a minimum age
checking buyers from locations you want to allow
checking ID documents and KYC/Sanctions
You can use our reference implementation UI template using Candy Machine V3 with integrated Civic Pass ->​
We recommend using the latest sugar command line tool to create your mint.
Creating a protected mint using Sugar CLI
In Candy Machine v3 creation of the token guard is separate from the mint.
1.install sugar: currently sugar support for Candy Machine is alpha mode and needs to be downloaded here​
2.Create your mint (with Candy Machine v3 the mint and the token guard are created separately). Follow the prompts on the CLI:
sugar launch
3.A config.json should have been created. Edit this file and add a 'guards' section (see the section below for alternative networks):

"guards": {
    "default": {
      "gatekeeper": {
        "gatekeeperNetwork": "ignREusXmGrscGNUesoU9mxfds9AiYTezUKex2PsZV6",
        "expireOnUse": false
      }
    },
    "groups": null
  }
4.Create the guard for your mint:
sugar guard add
5.The script should run successfully and you should see output like below:
%  sugar guard add
[1/3] 🔍 Looking up candy machine
​
Candy machine ID: Hjyvm2VpAMfFQDNKJaQUoQqr3HPXDSGokRGD9hpSBZay
​
[2/3] 🛡  Initializing a candy guard
Signature: 4AMsoW9n9j6gWbgqHwTK9haSHwFSDSJX18YYZrYDzYTepXgBpoGh2QgQ3wnYticfTgw5P92GY8P7rTebK6g6WMWj
​
Candy guard ID: EYajALMJFqdFSYJj6KVFzYDjbRGFL61WTUECKiS4wGBC
​
[3/3] 📦 Wrapping
Signature: 2oyYp8Jd3copk7bkB69kk7hSEpHLJKnWxZAZTwyT1mEmpjC5faKaDLwoRNHZxgjRDK2fmvPs4gqKdd83QFUXeiyD
​
The candy guard is now the mint authority of the candy machine.
​
✅ Command successful.
 
Enabling Civic Pass Checks
CAPTCHA Check
When CAPTCHA is enabled, a user will be issued a Civic Pass after successfully completing a CAPTCHA challenge and automatically checked by the Candy Machine prior to minting.
Use this guard's config for CAPTCHA protection:
"gatekeeper": {
    "gatekeeperNetwork": "ignREusXmGrscGNUesoU9mxfds9AiYTezUKex2PsZV6",
    "expireOnUse": true
  },
A Civic CAPTCHA Pass remains active only for 10 minutes and for one mint to limit the options of malicious botters verifying multiple wallets. If a user tries to use an inactive pass, it will automatically prompt them to refresh it.
Liveness Check
When liveness is enabled, a user must do a 3D video selfie to prove they are a real person and not a bot before they can mint.
Use this guard's config for liveness protection:
"gatekeeper": {
    "gatekeeperNetwork": "vaa1QRNEBb1G2XjPohqGWnPsvxWnwwXF67pdjrhDSwM",
    "expireOnUse": true
  },
​
Uniqueness Check
When uniqueness is enabled, the user must do a 3D video selfie to ensure that a real person only uses one wallet to mint. You can decide how many NFTs this unique user can mint.
​Contact us to get the gatekeeper information to setup your guard's config.
​
Age Check
When age check is enabled, the user must provide a government issued ID and complete a 3D video selfie before they they are issued a Civic Pass. 
​Contact us to get the gatekeeper information to setup your guard's config.
​
Location Check
When IP-based location check (including VPN detection) is enabled, the user must be in a country that you allow to participate in your mint prior to being issued a Civic Pass.
​Contact us to get the gatekeeper information to setup your guard's config.
​
ID Document & KYC/Sanction Check
When enabled, the user must provide a government issued ID and complete a 3D video selfie before they they are issued a Civic Pass. Sanction checks can also be performed prior to issuing a Civic Pass.
​Contact us to get the gatekeeper information to setup your guard's config.
​
For detailed configuration instructions on how to configure and deploy your mint, please refer to MetaPlex's Sugar repository.
Please review the Civic Pass Terms of Service carefully before continuing. By installing or integrating the Civic Pass (or CAPTCHA) plugin, you agree to Civic Pass Terms of Service on behalf of the organization, company or other legal entity for which you act; and represent that you have the authority to bind the same.
If you do not have such authority, or if you do not agree with this the Civic Pass Terms of Service, you must not continue and may not use the Services.
Terms and Conditions
You agree and acknowledge that you are solely responsible and liable for your use of the CAPTCHA verification technology provided here (“Verification”) or any resulting data of such Verification (“Verification Results”). Civic Technologies, Inc. (“Civic”) makes no representations or warranties regarding the accuracy or completeness of any Verification Results, or that such Verification or Verification Results are adequate for, or achieve, your business purpose or requirements. You assume sole responsibility for compliance with any and all required registrations, licensing, and other requirements regulating your products and services and related activities.
Civic assumes no responsibility for compliance with any laws or regulations regarding your products or services or your use of the Verification or Verification Results. Without limiting the foregoing, Civic is not responsible for, and will not provide you with any advice, counsel, or recommendation pertaining to legal compliance of your products or services associated with your use of the Verification or Verification Results in connection with your products or services, and Civic hereby explicitly disclaims any representation or warranty that use of any Verification or Verification Results will meet your legal obligations, if any.
Last modified 1mo ago