Execution evidence

Verify a signed provider-bound execution permit

Performs cryptographic and structural verification of one MSP+JWT permit and, when supplied, exact audience matching. This stateless verifier cannot observe issuance state, prior redemption, revocation or concurrent use. It is advisory only and always returns provider_submission_permitted=false and one_use_enforced=false. A provider or facilitator must use the authenticated atomic redemption endpoint before submission.

post/api/v2/execution-permits/verify

Request

  • Base URL: https://mandateshield.com
  • URL: https://mandateshield.com/api/v2/execution-permits/verify
  • Auth: none declared

Request body

compactstring required
expected_audiencestring

Optional exact string comparison. Audience arrays and wildcard matching are not supported.

Response

Permit signature, exact profile and supplied audience context are valid; no provider submission is authorized

cryptographically_validunknown required
context_matchedboolean required

True only when the caller supplied expected_audience and it matched exactly. Omission is reported as false, not as a failed signature.

claimsExecutionPermitClaims required(unresolved $ref)
online_state'UNKNOWN' required
one_use_enforcedunknown required
advisory_onlyunknown required
provider_submission_permittedunknown required
redemption_uri'https://mandateshield.com/api/v2/execution-permits/redeem' required

Changes

No recorded changes to this operation across all 1 revision of this API.