Delegations

Look up an artifact's claim

Public, no API key. Has a domain published a delegation for this exact artifact, and where was it looked for? The answer is decided by carrier evidence read live — the npm manifest, the MCP registry entry the package names, an endpoint's own and host cards, and the delegating domains' _mcp DNS pointers and .well-known cards — never by the issuer's registry alone: claimed only when a token read from one of those places is signed by this issuer, names exactly this artifact and is in force. Every place read is listed with its result. Answers are stored and reused for up to an hour (five minutes when a place could not be read). The found tokens are returned so the answer can be verified without trusting this endpoint.

get/api/v1/artifacts/claim

Request

  • Base URL: https://api.proof.holdings
  • URL: https://api.proof.holdings/api/v1/artifacts/claim
  • Auth: none required

Query parameters

type'url' | 'purl' required

purl for a package, url for an https endpoint

delegatestring required

The artifact identifier, canonicalized as at delegation issuance (a purl version, qualifiers or subpath are rejected). Exactly one; a repeated parameter is rejected

Example:pkg:npm/@proof-holdings/mcp-server

Response

The claim answer

delegatestring required

The canonical artifact identity the answer is about

delegate_type'url' | 'purl' required
artifact_pathstring nullable required

The artifact's page on proof.holdings (/npm/…, /pypi/…, /endpoint/…); null for a class with no page

claim'claimed' | 'no_claim_found' required

claimed only when a token read from a checked location is signed by this issuer, names exactly this artifact and is in force. A delegation that was issued but never published is not a claim, and is not disclosed

checked_atstring date-time required

When the answer was checked; answers are reused for up to an hour (five minutes when a location could not be read)

listingobject nullable required

Directory listing context for the artifact. Always null today — reserved for the MCP directory's listings

Example response

{
  "delegate": "pkg:npm/@proof-holdings/mcp-server",
  "artifact_path": "/npm/@proof-holdings/mcp-server",
  "delegations": [
    {
      "principal": "proof.holdings",
      "proof_id": "ph_dlg_0123456789abcdef0123456789abcdef",
      "scope": [
        "send-email"
      ]
    }
  ]
}

Changes

No recorded changes to this operation across all 1 revision of this API.