Verification

Check a Web Bot Auth key directory

One fetch, every check named: status, media type, JWK Set shape, Ed25519 keys, and the proof-of-possession signature verified against the listed keys. Free. The signed version is /api/buy/signature_agent_card; the readable landing is /bot-auth.

post/api/bot-auth/check

Request

  • Base URL: https://scvd.store
  • URL: https://scvd.store/api/bot-auth/check
  • Auth: none required

Request body

urlstring uri required

A bare origin is checked at /.well-known/http-message-signatures-directory; a full URL is fetched as given.

Response

OK

subjectstring required
verdictstring required
criteriastring required

The criteria version this verdict was rendered under.

directory_urlstring uri
expected_content_typestring
signed_versionstring

Where to buy the signed, certificate-bound version of this same battery.

what_this_is_notstring required

A well-formed key directory is not a trustworthy operator. This checks the shape, never the party.

Changes

No recorded changes to this operation across all 1 revision of this API.