---
title: "Verify a pasted Web Bot Auth request: the agent's directory, then the request's signature against a key the directory proves it holds"
method: POST
path: "/api/tool/wba"
---

# Verify a pasted Web Bot Auth request: the agent's directory, then the request's signature against a key the directory proves it holds

`POST /api/tool/wba`

## Request

- Base URL: `https://crawlcheck.io`
- URL: `https://crawlcheck.io/api/tool/wba`
- Auth: none required

## Request body

- object
  - `request` string: Pasted request headers: Host, Signature-Agent, Signature-Input, Signature, optionally the request line
  - `agent` string: Alternatively, only the agent whose directory to audit

## Response `200`

The verdict with every step shown

- object, nullable
  - `ok` boolean, nullable
  - `mode` string, nullable
  - `agent` string, nullable
  - `directory` object, nullable
    - `url` string, nullable
    - `status` number, nullable
    - `redirected` boolean, nullable
    - `content_type` string, nullable
    - `content_type_ok` boolean, nullable
    - `keys` object[], nullable
      - `kid` string, nullable
      - `kty` string, nullable
      - `crv` string, nullable
      - `thumbprint` string, nullable
      - `x` string, nullable
      - `usable` boolean, nullable
      - `bound` boolean, nullable
      - `why` string, nullable
    - `signatures` object[], nullable
      - `label` string, nullable
      - `keyid` string, nullable
      - `tag` string, nullable
      - `alg` string, nullable
      - `created` number, nullable
      - `expires` number, nullable
      - `components` string[], nullable
      - `window` string, nullable
      - `verified` boolean, nullable
      - `why` string, nullable
      - `signature_valid` boolean, nullable
    - `content_digest` object, nullable
      - `present` boolean, nullable
      - `matches` boolean, nullable
      - `algorithm` string, nullable
    - `verdict` string, nullable
    - `reasons` unknown[], nullable
      - unknown
    - `bound_keys` number, nullable

## Other responses

- `400`: Nothing to check

---

[API](https://skmtc.dev/crawlcheck/apis/crawlcheck-api.md) · [All operations](https://skmtc.dev/crawlcheck/apis/crawlcheck-api/llms.txt) · [OpenAPI document](https://skmtc.dev/crawlcheck/apis/crawlcheck-api/revisions/57acbd6d4489?raw)