---
title: "Verify a single package metadata"
method: POST
path: "/signature-verification/{artifact_family}"
tags: ["channels"]
---

# Verify a single package metadata

`POST /signature-verification/{artifact_family}`

## Request

- Base URL: `https://api.anaconda.cloud/api`
- URL: `https://api.anaconda.cloud/api/signature-verification/{artifact_family}`
- Auth: one of:
  - HTTP bearer
  - API key in header `X-Auth`

## Path parameters

- `artifact_family` 'conda', required

## Request body

- FileSignatureVerificationRequest
  - `metadata` object, required
    - `md5` string, required
    - `name` string, required
    - `size` number, required
    - `build` string, required
    - `sha256` string, required
    - `subdir` string, required
    - `depends` string[], required
    - `license` string, required
    - `version` string, required
    - `build_number` number, required
  - `signatures` object, required
    - `public_key` string, required
    - `signature` string, required

## Response `200`

Verfication succeed

- object
  - `verified` boolean

## Other responses

- `400`: Server cannot execute request due to something that is perceived to be a client error
- `401`: Unauthenticated, no token is provided or token is invalid
- `403`: Access is forbidden
- `500`: Internal server error

---

[API](https://skmtc.dev/anaconda/apis/anaconda-server-api.md) - [All operations](https://skmtc.dev/anaconda/apis/anaconda-server-api/llms.txt) - [OpenAPI document](https://skmtc.dev/anaconda/apis/anaconda-server-api/revisions/6aef0cb7a151?raw)