{"uid":"cap_W5Gz76Sq55YYF1l9ZTN5f","slug":"ddg-webauthn-attestation-trust-check-e04f3fa2","name":"DDG WebAuthn Attestation Trust Check","description":"WebAuthn attestation trust check: parse attestationObject fmt/attStmt, verify packed and fido-u2f self-attestation signatures, verify x5c leaf certificate signatures when the crypto backend is present, echo AAGUID and credential material, and state the trust level (FIDO MDS not configured; never overstated).","url":"https://agents.daedalusdevelopmentgroup.com/v1/auth/webauthn-attestation?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input","output"],"properties":{"input":{"type":"object","required":["type","method","bodyType","body"],"properties":{"body":{"type":"object"},"type":{"type":"string","const":"http"},"method":{"enum":["POST","PUT","PATCH"],"type":"string"},"bodyType":{"enum":["json","form-data","text"],"type":"string"}},"additionalProperties":true},"output":{"type":"object","required":["type","example"],"properties":{"type":{"type":"string"},"example":{"ok":true}},"additionalProperties":true}}},"responseSchema":{"type":"json","example":{"ok":true}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.005","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.005/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_xmR_uq8VbOrNvhDPmFm2h","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.005","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Parses and verifies a WebAuthn attestationObject, checks packed and FIDO-U2F self-attestation signatures, optionally verifies x5c leaf certificate signatures, and returns the trust level, AAGUID, and credential material.","exampleAgentPrompt":"Check the trust level of this WebAuthn registration by verifying the attestationObject — it uses packed attestation format — and tell me the AAGUID, whether the signature checks out, and what trust level you can confirm without FIDO MDS.","exampleUseCases":[{"title":"Passkey registration trust audit","prompt":"I just received a WebAuthn attestationObject from a user registering a new passkey. Can you verify the packed attestation signature, extract the AAGUID and credential material, and tell me the trust level I should assign to this credential?"},{"title":"FIDO-U2F security key validation","prompt":"A user registered with a FIDO-U2F hardware key and I have the attestationObject and clientDataJSON. Please verify the self-attestation signature and let me know whether the credential checks out cryptographically."},{"title":"x5c certificate chain inspection","prompt":"I need to verify the x5c leaf certificate signature in this WebAuthn attestationObject and get back the trust level and AAGUID — can you parse the attStmt and confirm the certificate signature is valid?"}],"resultDescription":"Returns a JSON object indicating whether verification succeeded (ok: true/false), the parsed attestation format (fmt), the AAGUID extracted from the authenticator data, echoed credential material, and a trust level string — with the caveat that FIDO MDS is not configured so trust is never overstated.","failureModes":["Invalid or malformed attestationObject causes parse failure and 400-class error","Signature verification failure when attStmt signature does not match the credential public key","x5c certificate verification unavailable if crypto backend is not present","Unsupported attestation format (e.g. TPM or Android safetynet) not handled by this endpoint","Missing required body fields returns validation error","Payment not included or insufficient USDC causes x402 payment-required rejection"],"whenToPreferThis":"Use this endpoint when you need a stateless, pay-per-call cryptographic check of a WebAuthn attestationObject — specifically for packed or FIDO-U2F attestation formats — without standing up your own FIDO MDS-connected verifier. Prefer this over full passkey verification endpoints when you only need the attestation trust check and AAGUID extraction step in isolation.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-20T12:37:15.812Z","isFirstParty":false,"canonicalSlug":"ddg-webauthn-attestation-trust-check-e04f3fa2"}