{"uid":"cap_CSkoXs3PD2wi3LzuY2sz_","slug":"halowerk-sicherwerk-openpgp-detached-signature-verifier-b055a364","name":"HALOWERK sicherwerk OpenPGP Detached Signature Verifier","description":"Checks a detached OpenPGP signature against the bytes it claims to cover, using the pinned GnuPG build and nothing else. What comes back is the verdict in GnuPG's own terms, the fingerprint that actually signed, the signature timestamp, the algorithms used, and whether the key is expired or revoked. A wrong key, a tampered byte or a signature made by someone else each produce a distinct verdict rather than a bare false.","url":"https://sicher.halowerk.com/v1/oss-gnupg-detached-signature-verify?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"signature_armored":{"type":"string","maxLength":262144,"minLength":1},"public_key_armored":{"type":"string","maxLength":262144,"minLength":1},"signed_data_base64":{"type":"string","maxLength":349528,"minLength":1}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.002","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.002/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_orjKBkXlEUmVxC3XrhgWq","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.002","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Verifies a detached OpenPGP signature against provided bytes using GnuPG, returning a detailed verdict including signing fingerprint, timestamp, algorithms, and key status.","exampleAgentPrompt":"Can you verify this detached PGP signature against the release tarball bytes? I have the armored signature, the signer's public key, and the base64-encoded file data — I need to know if it's valid, whose fingerprint signed it, when it was signed, and whether the key is currently revoked or expired.","exampleUseCases":[{"title":"Software release artifact verification","prompt":"I'm downloading an open-source release and want to verify the attached .asc signature file against the tarball. Here's the armored signature, the project's public key, and the base64-encoded tarball bytes — tell me if the signature is valid, which fingerprint signed it, and whether the key has been revoked."},{"title":"Signed email or document authenticity check","prompt":"Someone sent me a document with a detached PGP signature claiming to be from our legal team. Can you check this armored signature against the document bytes using their public key and tell me the exact verdict, the signing fingerprint, and when it was signed?"},{"title":"CI/CD pipeline code signing audit","prompt":"In our build pipeline, binaries are supposed to be signed by our release key. I have the armored detached signature, our release public key, and the base64 binary bytes — verify the signature and confirm the fingerprint, signing timestamp, and algorithms so I can log it for our audit trail."}],"resultDescription":"Returns GnuPG's verification verdict (valid/invalid/tampered/wrong key), the fingerprint of the key that actually signed the data, the signature creation timestamp, the public-key and hash algorithms used, and flags indicating whether the signing key is expired or revoked. Distinct error verdicts are provided for wrong key, tampered data, or unrecognized signer.","failureModes":["Signature does not match the provided data — returns tampered or invalid verdict","Public key does not correspond to the signing key — returns wrong-key verdict","Signing key is expired — verdict includes expiry flag","Signing key has been revoked — verdict includes revocation flag","Malformed or non-armored signature input — parsing error returned","Base64 signed_data_base64 is not valid base64 — decode error","Public key armoring is corrupted or truncated — key import failure"],"whenToPreferThis":"Choose this endpoint when you need a trustworthy, detailed OpenPGP/GPG detached signature verification that goes beyond a boolean result — specifically when you need the signing fingerprint, timestamp, algorithm details, and key health (expiry/revocation) in a single call, and when you want consistent GnuPG semantics using a pinned GnuPG build rather than a reimplemented or third-party crypto library.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-30T07:03:42.614Z","isFirstParty":false,"canonicalSlug":"halowerk-sicherwerk-openpgp-detached-signature-verifier-b055a364"}