{"uid":"cap_l-ooDZ-eohJJWyMpGZYdr","slug":"agent-exec-url-attestation-98c41399","name":"Agent-Exec URL Attestation","description":"Accountless, pay-per-use code execution for software agents: submit source code, get stdout, stderr and exit code back from an isolated, network-less sandbox. No account, no API key -- possession of valid payment is sufficient.","url":"https://agent-exec.45.67.221.128.sslip.io/attest","method":"POST","headers":{},"bodySchema":{"type":"object","required":["url"],"properties":{"url":{"type":"string","description":"An absolute http:// or https:// URL, at most 2048 UTF-8 bytes. Fetched from OUR vantage point; the body is never returned to you."}}},"responseSchema":{"type":"object","required":["attestation_id","url","observed_at","fetch_ok","fetch_code","http_status","body_sha256","body_bytes","body_truncated","content_type","final_url_after_redirects","redirects","detail","signature","signer_address"],"properties":{"url":{"type":"string","description":"The URL you asked us to fetch, exactly as sent."},"detail":{"type":["string","null"],"description":"Free-text detail on a non-OK fetch_code (e.g. the timeout budget, the unsafe redirect target). Null when fetch_ok is true."},"payment":{"type":"object","properties":{"asset":{"type":"string"},"payer":{"type":"string","description":"The paying wallet's address."},"amount":{"type":"string","description":"Atomic units of the settlement asset that were charged."},"network":{"type":"string"},"transaction":{"type":"string","description":"On-chain settlement transaction hash."}},"description":"Only present on POST /attest's 201, never on a GET /attest/{id} read."},"fetch_ok":{"type":"boolean","description":"Whether the fetch reached a real HTTP response, however unsuccessful. false means DNS/connect failure, timeout, or a redirect refused for SSRF safety -- see fetch_code."},"redirects":{"type":"integer","description":"How many redirects were followed before the final response (or the refusal)."},"signature":{"type":"string","description":"An EIP-191 personal-sign signature over attestation_id, url, final_url_after_redirects, observed_at, http_status, body_sha256, body_bytes, body_truncated, content_type, fetch_ok, fetch_code and redirects (domain \"agent-exec attestation v2\"), from signer_address. `detail` and `signer_address` are NOT part of the signed message. Verify with viem's verifyMessage({address: signer_address, message, signature}) -- see GET /attest/{id}'s description for the exact message and for handling an attestation signed under the prior v1 domain."},"body_bytes":{"type":"integer","description":"Bytes actually read off the wire, capped at 1048576 per fetch -- see body_truncated."},"fetch_code":{"enum":["ATTEST_FETCH_OK","ATTEST_FETCH_URL_REFUSED","ATTEST_FETCH_REDIRECT_UNSAFE","ATTEST_FETCH_TOO_MANY_REDIRECTS","ATTEST_FETCH_TIMEOUT","ATTEST_FETCH_CONNECT_FAILED"],"type":"string"},"body_sha256":{"type":["string","null"],"description":"sha256 of the fetched body, hex-encoded, or null if fetch_ok is false. The body itself is never returned or stored beyond this hash."},"http_status":{"type":["integer","null"],"description":"The HTTP status the final hop answered with, or null if fetch_ok is false."},"observed_at":{"type":"string","format":"date-time","description":"When the fetch completed, ISO 8601."},"content_type":{"type":["string","null"],"description":"The Content-Type header on the final response, or null if fetch_ok is false."},"attestation_id":{"type":"string","format":"uuid","description":"Pass as GET /attest/{id} to read this back, or hand it to a third party to verify."},"body_truncated":{"type":"boolean","description":"True if the body was larger than the per-fetch cap and body_sha256/body_bytes cover only the truncated prefix."},"signer_address":{"type":"string","description":"The address that signed this attestation. Also published at GET /health as attestSignerAddress, if you lost track of which address to verify against."},"final_url_after_redirects":{"type":["string","null"],"description":"The URL actually fetched after following redirects, or null if the fetch never reached one."}}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.008","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.008/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.008","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.008","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_ga5bZSPzaJ9UDvW6Ym28b","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.008","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Fetches a URL from a neutral vantage point and returns a cryptographically signed attestation of the HTTP response metadata (status, body hash, content-type, redirects) without returning the body itself.","exampleAgentPrompt":"Can you get me a signed attestation proving that https://example.com/report.pdf exists right now — I need the body SHA-256 hash, the HTTP status code, and the final URL after any redirects, all signed so I can verify it later?","exampleUseCases":[{"title":"Audit trail for a published document","prompt":"I need a tamper-proof record that https://contracts.acme.com/agreement-v3.pdf was accessible and had a specific content hash as of right now — can you fetch it from a neutral vantage point and give me a signed attestation I can save for legal records?"},{"title":"Verify a third-party API is live","prompt":"Before I kick off my workflow, can you independently confirm that https://api.partner.com/health returns a 200 OK right now and give me a cryptographically signed proof of that fact?"},{"title":"Detect redirect destination for a short link","prompt":"Can you tell me where https://go.myservice.io/offer ultimately redirects to, how many hops it takes, and give me a signed attestation of the final URL so I can verify it hasn't been tampered with?"}],"resultDescription":"A JSON object containing: a unique attestation_id, the requested URL, the observed_at timestamp, whether the fetch succeeded (fetch_ok), a fetch_code, the HTTP status code, a SHA-256 hash of the response body, body byte count, a truncation flag, content-type, the final URL after redirects, redirect count, optional free-text detail on failures, an EIP-191 personal-sign signature over the key fields, and the signer's Ethereum address. On a successful POST /attest call, a payment sub-object with asset, payer address, amount, network, and transaction hash is also included.","failureModes":["DNS or connection failure: fetch_ok=false with fetch_code indicating the error","SSRF safety refusal: fetch_ok=false when the target resolves to a private/internal IP","Redirect loop or too many redirects: fetch_ok=false with detail explaining the limit","Timeout: fetch_ok=false with detail noting the timeout budget","Payment failure: HTTP 402 returned if the x402 payment is missing or invalid","Body truncation: body larger than 1 MB is capped; body_truncated=true but fetch still succeeds","Invalid URL: request rejected if URL exceeds 2048 bytes or is not absolute http/https"],"whenToPreferThis":"Choose this endpoint when you need a neutral, cryptographically signed third-party witness of a URL's HTTP response state — especially when the body itself is not needed but proof of existence, content hash, status code, or redirect chain is required. It is uniquely suited for audit trails, legal evidence, on-chain verification (EIP-191 signatures), or any scenario where you cannot trust your own fetch because you are a party to the transaction. Prefer it over a simple HTTP GET when non-repudiation or third-party attestation matters.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-15T12:33:52.538Z","isFirstParty":false}