{"uid":"cap_aZEB2HyGe0ex9wEKycWM6","slug":"agent-trust-lookup-verify-signed-request-d22f3a28","name":"Agent Trust Lookup – Verify Signed Request","description":"Know your agent before you serve it: wallet history and micro-payment behaviour on Base, ERC-8004 identity and feedback, Web Bot Auth and agent-card presence on a domain, and signed-request verification. Pay per call over x402, no API key.","url":"https://agent-trust.agent-utils.workers.dev/v1/verify-request","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"headers":{"type":"string"}}},"responseSchema":{"type":"json","example":{"agent":"https://agent.example","keyid":"abc","valid":true,"reason":null,"checkedAt":"2026-09-06T21:00:00.000Z","directoryKeys":2}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.005","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.005/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_gmmWVerWed0Vc6Y_Pxo0W","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.005","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Verifies the cryptographic signature on an incoming agent request, checking the signing key against a published agent-card directory to confirm the agent's identity is legitimate.","exampleAgentPrompt":"Before I process this incoming request from that external AI agent, can you verify its signed headers and tell me whether its identity checks out — specifically whether the signing key matches its published agent card?","exampleUseCases":[{"title":"Gate API access for inbound agents","prompt":"An AI agent just hit my endpoint and included some signed headers — can you verify those headers and tell me if the agent's signature is valid and its key is in the public directory before I let it through?"},{"title":"Debug a failed agent handshake","prompt":"My service rejected an agent request but I'm not sure why — can you run the signed headers through the trust verifier and tell me the reason the signature failed and how many directory keys were found for that agent?"},{"title":"Audit trail for agent interactions","prompt":"I want to log which AI agents are making verified calls to my platform — can you verify this request's signed headers and return the agent URL, key ID, and timestamp so I can record it?"}],"resultDescription":"Returns a JSON object with: the agent's URL, the key ID used to sign the request, a boolean indicating whether the signature is valid, a reason field (null if valid, error string if invalid), a checkedAt ISO timestamp, and the count of public keys found in the agent's directory listing.","failureModes":["Invalid or malformed headers cause valid=false with a descriptive reason string","Agent domain has no agent card or Web Bot Auth file, resulting in directoryKeys=0 and valid=false","Signature mismatch between provided key and directory keys returns valid=false","Missing headers field in request body causes a 400-level error","Payment not fulfilled via x402 returns a 402 Payment Required response","Network timeout fetching remote agent card returns an error reason"],"whenToPreferThis":"Use this endpoint when you need to cryptographically authenticate an inbound AI agent request by verifying its signed HTTP headers against its publicly hosted agent card or Web Bot Auth document. Prefer this over manual key management when you want a pay-per-call, keyless approach to agent authentication on Base-integrated infrastructure, especially when ERC-8004 identity signals and on-chain wallet history are also relevant to your trust decision.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-15T18:41:23.776Z","isFirstParty":false}