Signing & Provenance

Verify a skill content digest

Compares a caller-supplied SHA-256 digest against the latest signed version's canonical content digest and returns whether it matches, along with the signer identity. Public but strictly rate-limited (10 req/min/IP). Returns a mismatch reason (not_found, unsigned, or digest_mismatch) when it does not verify.

post/api/v1/skills/{slug}/verify

Request

  • Base URL: https://api.skills-hub.ai
  • URL: https://api.skills-hub.ai/api/v1/skills/{slug}/verify
  • Auth: one of:
    • HTTP bearer
    • API key in header Authorization

Path parameters

slugstring required

Response

Successful response. The returned fields are described in this endpoint's summary/description; typed per-field response schemas are being added incrementally.

okboolean required
signerIdentitystring nullable required
mismatchReason'digest_mismatch' | 'unsigned' | 'not_found' | 'null' nullable required

Changes

No recorded changes to this operation across all 1 revision of this API.