---
title: "Sign caller-supplied context_digest / prompt_hash and bounded fields; the service does not observe the underlying context or execution"
method: POST
path: "/notarize"
---

# Sign caller-supplied context_digest / prompt_hash and bounded fields; the service does not observe the underlying context or execution

`POST /notarize`

## Request

- Base URL: `https://api.whitemagic.dev`
- URL: `https://api.whitemagic.dev/notarize`
- Auth: one of:
  - HTTP bearer
  - API key in header `X-WM-Key`
  - API key in header `X-PAYMENT`

## Request body

- union
  - object
    - `context_digest` string, required: SHA-256 hex digest of caller context (64 hex chars or sha256:<64 hex>)
    - `prompt_hash` string: SHA-256 hex digest of caller prompt (64 hex chars or sha256:<64 hex>)
    - `action` string
    - `model` string
    - `agent_id` string
    - `metadata` object: Up to 16 ASCII-keyed scalar entries (strings <= 256 chars, safe integers, booleans, or null)
  - object
    - `context_digest` string: SHA-256 hex digest of caller context (64 hex chars or sha256:<64 hex>)
    - `prompt_hash` string, required: SHA-256 hex digest of caller prompt (64 hex chars or sha256:<64 hex>)
    - `action` string
    - `model` string
    - `agent_id` string
    - `metadata` object: Up to 16 ASCII-keyed scalar entries (strings <= 256 chars, safe integers, booleans, or null)

## Response `200`

signed caller-claim attestation

- object
  - `notarized` boolean, required
  - `digest` string, required
  - `receipt` object, required
  - `service` string, required
  - `lookup_url` string, required

## Other responses

- `400`: invalid JSON or shape
- `401`: missing or invalid key

---

[API](https://skmtc.dev/whitemagic/apis/whitemagic-receipt-verification-api.md) · [All operations](https://skmtc.dev/whitemagic/apis/whitemagic-receipt-verification-api/llms.txt) · [OpenAPI document](https://skmtc.dev/whitemagic/apis/whitemagic-receipt-verification-api/revisions/92a4341eb473?raw)