---
title: "Scan Verdict"
method: GET
path: "/api/v1/public/scan/{owner}/{repo}/verdict.json"
tags: ["public-scan"]
---

# Scan Verdict

`GET /api/v1/public/scan/{owner}/{repo}/verdict.json`

## Request

- Base URL: `https://agentavow.com` (the document declares no server; this is the origin it was published from)
- URL: `https://agentavow.com/api/v1/public/scan/{owner}/{repo}/verdict.json`
- Auth: none declared

The minimal CORS-open verdict for the embeddable widget's offline verify:
the signed JWS attestation + coordinate + score + report link. The widget fetches
this cross-origin, then recomputes the Ed25519 signature in-browser against the
public JWKS — so the check runs on the visitor's machine, not ours.

## Path parameters

- `owner` string, required
- `repo` string, required

## Response `200`

Successful Response

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/agentavow/apis/agentavow-api.md) · [All operations](https://skmtc.dev/agentavow/apis/agentavow-api/llms.txt) · [OpenAPI document](https://skmtc.dev/agentavow/apis/agentavow-api/revisions/e1e20476dbfc?raw)