---
title: "Ask \"was THIS content scanned?\" — server-side, no auth needed"
method: POST
path: "/v1/receipts/content-check"
---

# Ask "was THIS content scanned?" — server-side, no auth needed

`POST /v1/receipts/content-check`

## Request

- Base URL: `https://agent-shield.startekenterprises.com`
- URL: `https://agent-shield.startekenterprises.com/v1/receipts/content-check`
- Auth: none required

The keyed content hash can't be recomputed client-side by design, so this check runs server-side. Pass the receipt's content_hash (h) and candidate content; returns whether they match. fp is the receipt's key_fp (empty string when absent).

## Request body

- object
  - `h` string, required: Receipt content_hash
  - `content` string, required: Candidate text to test
  - `fp` string: Receipt key_fp (may be empty)

## Response `200`

Match result

- object
  - `match` boolean

## Other responses

- `400`: h and content required

---

[API](https://skmtc.dev/startekenterprises/apis/agent-shield.md) · [All operations](https://skmtc.dev/startekenterprises/apis/agent-shield/llms.txt) · [OpenAPI document](https://skmtc.dev/startekenterprises/apis/agent-shield/revisions/858e23c6841d?raw)