---
title: "Visa Trusted Agent Protocol Header Verifier"
method: POST
path: "/v1/tools/verify_visa_tap_header"
tags: ["Visa", "Trusted Agent Protocol", "RFC 9421", "HTTP Message Signatures", "agent identity", "Ed25519", "RSA-PSS"]
---

# Visa Trusted Agent Protocol Header Verifier

`POST /v1/tools/verify_visa_tap_header`

## Request

- Base URL: `https://ainumbers.co`
- URL: `https://ainumbers.co/v1/tools/verify_visa_tap_header`
- Auth: none declared

Verifies Visa Trusted Agent Protocol (TAP) HTTP Message Signature headers against a fixed 9-point checklist: header format, component coverage, RFC 9421 signature-base reconstruction, algorithm allowlist, optional WebCrypto signature verification, created/expires freshness, and nonce/tag checks. Never fetches a key over the network; verification runs only against a pasted public key.

**Tool URL:** https://ainumbers.co/tools/667-tap-header-verifier.html
**AP2/Policy Mandate export:** yes

## Request body

- object
  - `signature_input` string: Signature-Input header
  - `signature` string: Signature header
  - `request_line` string: Optional request line
  - `public_key` string: Optional public key or registry record

## Response `200`

Successful tool execution result

- object
  - `checks` unknown[]
    - unknown

---

[API](https://skmtc.dev/ainumbers/apis/ainumbers-co-fintech-intelligence-suite.md) · [All operations](https://skmtc.dev/ainumbers/apis/ainumbers-co-fintech-intelligence-suite/llms.txt) · [OpenAPI document](https://skmtc.dev/ainumbers/apis/ainumbers-co-fintech-intelligence-suite/revisions/b462e4f5bb28?raw)