---
title: "Verify an AI agent's HTTP Message Signature"
method: POST
path: "/v1/verify/agent"
tags: ["AI agents"]
---

# Verify an AI agent's HTTP Message Signature

`POST /v1/verify/agent`

## Request

- Base URL: `https://www.layercall.com`
- URL: `https://www.layercall.com/v1/verify/agent`
- Auth: one of:
  - API key in header `x-api-key`
  - HTTP bearer

RFC 9421 / Web Bot Auth. Proves which agent sent a request, rather than inferring it from a User-Agent.

## Request body

- object
  - `url` string, required
  - `method` string
  - `headers` object, required

## Response `200`

Success

- object
  - `agent` unknown
  - `docs` string
  - `expires_in` unknown
  - `keyid` string
  - `processing_time_sec` number
  - `purpose` unknown
  - `reason` string
  - `replay_protection` string
  - `request_id` string
  - `verified` boolean

## Other responses

- `400`: Invalid input
- `402`: Quota exceeded, or account paused after a failed payment
- `403`: Invalid or revoked API key
- `429`: Rate limited — honour Retry-After

---

[API](https://skmtc.dev/layercall/apis/layercall-api.md) · [All operations](https://skmtc.dev/layercall/apis/layercall-api/llms.txt) · [OpenAPI document](https://skmtc.dev/layercall/apis/layercall-api/revisions/b1258307dc91?raw)