VerifyMySignal — verify a signed signal

Verifies HMAC-SHA256 over timestamp + dot + nonce + dot + message, enforces freshness, and rejects replayed nonces. Message and shared secret are not stored. Production.

post/v1/signals/verify

Request

  • Base URL: https://api.scrubmytext.com
  • URL: https://api.scrubmytext.com/v1/signals/verify
  • Auth: HTTP bearer

Request body

messagestring required
shared_secretstring required
signaturestring required
timestampinteger required
noncestring required
max_age_secondsinteger

Response

Authenticity, freshness, replay, and acceptance result

Changes

No recorded changes to this operation across all 1 revision of this API.