{"uid":"cap_Dej1dPP27xg-xj-WRNgSq","slug":"ddg-web-bot-auth-wba-signature-verifier-0764fc16","name":"DDG Web Bot Auth (WBA) Signature Verifier","description":"Verify a Web Bot Auth (RFC 9421 + draft-meunier-webbotauth-httpsig-protocol) request signature: structured-field dictionary form, supported components/params, keyid resolution against the Signature-Agent key directory (or an inline public_key_jwk), the (URL, key) pairing rule, created/expires/nonce policy, and Ed25519 crypto verification. Pure verification, per-step report.","url":"https://agents.daedalusdevelopmentgroup.com/v1/wba/verify?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input","output"],"properties":{"input":{"type":"object","required":["type","method","bodyType","body"],"properties":{"body":{"type":"object"},"type":{"type":"string","const":"http"},"method":{"enum":["POST","PUT","PATCH"],"type":"string"},"bodyType":{"enum":["json","form-data","text"],"type":"string"}},"additionalProperties":true},"output":{"type":"object","required":["type","example"],"properties":{"type":{"type":"string"},"example":{"ok":true}},"additionalProperties":true}}},"responseSchema":{"type":"json","example":{"ok":true}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_Jw7ZYaPoapdsFSASKPl3t","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Verifies an RFC 9421 + Web Bot Auth HTTP message signature, returning a per-step structured report covering key resolution, component validation, nonce/timestamp policy, and Ed25519 cryptographic verification.","exampleAgentPrompt":"Check whether this incoming agent HTTP POST request has a valid Web Bot Auth signature — resolve the keyId against the Signature-Agent directory, confirm the nonce and timestamps are within policy, and run the Ed25519 crypto check, then give me the full per-step report.","exampleUseCases":[{"title":"Authenticating inbound agent API calls","prompt":"I'm receiving HTTP requests from AI agents that claim to be signed with Web Bot Auth — can you verify this POST request's signature, resolve its keyId from the Signature-Agent directory, and tell me step by step whether it passes nonce policy, timestamp policy, and the Ed25519 crypto check?"},{"title":"Debugging a failing WBA signature","prompt":"My agent is sending signed HTTP requests but the downstream server keeps rejecting them — can you run the full WBA verification on this request and give me a per-step breakdown so I can see exactly which part is failing, whether it's the key resolution, the component list, the timestamps, or the crypto itself?"},{"title":"Validating an inline public key JWK signature","prompt":"I have an HTTP request signed with an Ed25519 key where the public key is provided inline as a JWK rather than via a Signature-Agent directory — can you verify the signature and confirm whether the URL-to-key pairing rule is satisfied and the created/expires window is valid?"}],"resultDescription":"A JSON object with a boolean 'ok' field indicating overall pass/fail, plus a structured per-step report covering: Signature-Agent key directory resolution (or inline JWK acceptance), (URL, key) pairing rule check, structured-field dictionary parsing result, supported components and parameters validation, created/expires/nonce policy evaluation, and Ed25519 cryptographic verification outcome. Each step reports its individual pass/fail status and relevant details.","failureModes":["Invalid or malformed structured-field dictionary signature header returns parse error in report","KeyId not found in Signature-Agent directory and no inline public_key_jwk provided causes key resolution failure","Nonce reuse or expired nonce triggers nonce policy failure step","created or expires timestamps outside acceptable window cause timestamp policy rejection","URL-key pairing rule violation reported as pairing check failure","Ed25519 signature byte mismatch returns crypto verification failure","Unsupported signature component or parameter causes component validation error","Missing required input fields (type, method, bodyType, body) returns 400-level error","Payment not included or insufficient USDC causes x402 payment required response"],"whenToPreferThis":"Use this endpoint when you need a rigorous, step-by-step audit of a Web Bot Auth (RFC 9421 + draft-meunier-webbotauth-httpsig-protocol) HTTP message signature — especially when you need to distinguish exactly which layer failed (key resolution, nonce policy, timestamp policy, component validation, or Ed25519 crypto). Prefer this over generic JWT or OAuth validators when the signature follows the structured-field dictionary format and involves Signature-Agent key directories or Ed25519 keys. It is machine-payable via x402 at $0.01 USDC per call, making it suitable for per-request automated agent authentication pipelines.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-20T12:36:05.917Z","isFirstParty":false,"canonicalSlug":"ddg-web-bot-auth-wba-signature-verifier-0764fc16"}