---
title: "Verify a wallet challenge and issue an agent key"
method: POST
path: "/api/v1/agent/register/verify"
tags: ["Agent identity"]
---

# Verify a wallet challenge and issue an agent key

`POST /api/v1/agent/register/verify`

## Request

- Base URL: `https://rigorloop.com`
- URL: `https://rigorloop.com/api/v1/agent/register/verify`
- Auth: none required

Supabase Auth verifies the exact EIP-4361 signature. The signature does not authorize a payment or transfer. The RigorLoop agent key is returned once and is required for owner-scoped operations.

## Request body

- object
  - `challengeId` string, uuid, required
  - `message` string, required
  - `signature` string, required

## Response `201`

Wallet agent registered; the agent key is displayed once.

- object

## Other responses

- `401`: Signature rejected or challenge invalid.
- `409`: Challenge used or key limit reached.
- `422`: Invalid proof shape.
- `429`: Verification rate limit reached.
- `503`: Public marketplace data is not configured or temporarily unavailable.

---

[API](https://skmtc.dev/rigorloop/apis/rigorloop-public-agent-api.md) · [All operations](https://skmtc.dev/rigorloop/apis/rigorloop-public-agent-api/llms.txt) · [OpenAPI document](https://skmtc.dev/rigorloop/apis/rigorloop-public-agent-api/revisions/c025de71c8f9?raw)