{"uid":"cap_6ldvQbKQUEDkggCIK2hgF","slug":"autobus-wba-self-check-web-bot-auth-debugger-2b35f552","name":"autobus — WBA Self-Check (Web Bot Auth Debugger)","description":"Web bot auth debugging for AI agents, priced per check at $0.01. RFC 7638 keyid thumbprint verification, RFC 9421 Ed25519 signature verification, and per-verifier acceptance rules. Signed attestations, published fixtures, sources with dates.","url":"https://witness.holoweave.org/v1/wba-self","method":"POST","headers":{},"bodySchema":null,"responseSchema":{"example":{"signature":{"alg":"ed25519","value":"base64...","key_id":"aw-attest-2026-08"},"attestation":{"verdict":"pass","endpoint":"wba-self","evidence":{"request":{"url":"https://witness.holoweave.org/v1/wba-self","method":"POST","signed_headers":["signature","signature-input","signature-agent"]},"verdicts":{"signature":"pass","acceptance":"pass","thumbprint":"pass"},"acceptance":{"cloudflare":{"result":"accept"}}}}}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"down","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_8zwskcfWomu_TtQZ5PfXO","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Debugs why a signed bot HTTP request is rejected by verifying RFC 7638 key ID thumbprints, RFC 9421 Ed25519 signatures, and per-verifier acceptance rules, returning a signed attestation with a pass/fail verdict.","exampleAgentPrompt":"My agent's signed requests keep getting rejected — can you run the WBA self-check against all known verifiers to show me exactly which part is failing, whether it's the thumbprint, the Ed25519 signature, or a specific verifier's acceptance rules?","exampleUseCases":[{"title":"Diagnosing Cloudflare bot rejection","prompt":"My signed bot requests are being blocked by Cloudflare — can you use the WBA self-check to tell me if the issue is my key ID thumbprint, my Ed25519 signature, or Cloudflare's acceptance rules specifically?"},{"title":"Validating new signing key before deployment","prompt":"I just set up a new Ed25519 signing key for my AI agent and want to make sure everything is configured correctly before going live — run the WBA self-check against all verifiers and tell me if I'd pass."},{"title":"Debugging custom key directory URL","prompt":"My agent's key directory isn't at the standard well-known path — it's at https://myagent.example.com/keys/agent.json — can you run the WBA self-check using that directory URL and tell me whether my signatures and thumbprints will be accepted?"}],"resultDescription":"A signed attestation object containing a verdict ('pass' or 'fail'), the endpoint name, and a detailed evidence breakdown: the signed request headers used, individual sub-verdicts for signature validity, key ID thumbprint correctness, and acceptance by each named verifier (e.g. Cloudflare). The attestation itself is signed with the witness's Ed25519 key for independent verification.","failureModes":["Key directory URL unreachable or returns non-JWK content — thumbprint check fails","Ed25519 signature header malformed or missing — signature verdict fails","Signature-Agent header absent — request cannot be evaluated for bot identity","Specified verifier name unknown — verifier acceptance check skipped or errors","Payment not included or insufficient — x402 payment required error before check runs"],"whenToPreferThis":"Choose this endpoint when an AI agent is experiencing rejected signed HTTP requests and needs to pinpoint whether the failure is in the key ID thumbprint (RFC 7638), the Ed25519 message signature (RFC 9421), or a specific verifier's acceptance policy. It is purpose-built for the WBA (Web Bot Authentication) stack and returns a cryptographically signed attestation, making it more trustworthy than a generic HTTP debugging tool. Prefer it over manual inspection when you need an auditable, signed diagnosis rather than just logs.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-15T16:28:01.315Z","isFirstParty":false}