{"uid":"cap_pS-7cv1yo75raaj7Oppan","slug":"holoweave-witness-wba-signature-verifier-f0ebe4d8","name":"Holoweave Witness WBA Signature Verifier","description":"Web bot auth debugging for AI agents, priced per check at $0.01. RFC 7638 keyid thumbprint verification, RFC 9421 Ed25519 signature verification, and per-verifier acceptance rules. Signed attestations, published fixtures, sources with dates.","url":"https://witness.holoweave.org/v1/wba-signature","method":"POST","headers":{},"bodySchema":null,"responseSchema":{"example":{"signature":{"alg":"ed25519","value":"base64...","key_id":"aw-attest-2026-08"},"attestation":{"verdict":"fail","endpoint":"wba-signature","evidence":{"results":{"sig1":{"reason":"key_not_selectable","verified":null}}},"findings":[{"code":"SIG_KEY_NOT_SELECTABLE","detail":"keyid is the kid, not the RFC 7638 thumbprint, so the signature was never tested.","severity":"blocking"}]}}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"down","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_771TAbmtGX0mftcaEWuli","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Verifies that an HTTP request's Ed25519 signature (RFC 9421) is valid against the agent's published key directory","exampleAgentPrompt":"Can you verify that this signed HTTP POST to https://api.example.com/data — with the Signature-Input, Signature, and Signature-Agent headers I generated — actually validates against my published JWKS at https://agent.example.com/.well-known/jwks.json using Ed25519?","exampleUseCases":[{"title":"Pre-flight signature self-check","prompt":"Before I send out this signed request to the payment gateway, verify that my Ed25519 signature and Signature-Input headers actually validate against my published JWKS — the request is a POST to https://pay.example.com/submit with these headers I've already built."},{"title":"Debugging a rejected agent request","prompt":"My agent's request keeps getting rejected by the server — can you run it through the WBA signature verifier to check whether the RFC 9421 signature base is correctly formed and validates against my key at https://myagent.example.com/jwks.json?"},{"title":"CI pipeline signature regression test","prompt":"As part of my deployment check, verify that the sample signed HTTP request my agent generates — a GET to https://service.example.com/resource with these Signature-Input and Signature headers — still correctly verifies against the JWKS I published at https://agent.example.com/.well-known/jwks.json."}],"resultDescription":"A response indicating whether the Ed25519 signature on the provided HTTP request successfully verifies against the agent's published JWKS key directory, based on the RFC 9421 signature base constructed from the URL, method, and headers (including Signature-Input and Signature). Returns validity status and likely details about any verification failure.","failureModes":["Key not found in directory — the keyid in the Signature-Input does not match any key in the JWKS","Signature mismatch — the signature does not cryptographically verify against the resolved key","Malformed Signature-Input — the signature base cannot be constructed from the provided headers","Invalid JWKS URI — the key_directory URL is unreachable or returns an invalid JWKS","Missing required headers — Signature-Input or Signature header absent from the request sample","Unsupported algorithm — key type or algorithm is not Ed25519 as expected"],"whenToPreferThis":"Use this endpoint when you need to verify RFC 9421 HTTP message signatures using Ed25519, particularly in WBA (Web Browsing Agent) authentication flows. Prefer it over general-purpose JWT or OAuth verifiers when working with HTTP message signatures rather than bearer tokens. Especially useful for agents that self-sign HTTP requests and need to validate their own signatures before sending, or debug why a server is rejecting their signed requests. The sibling endpoint on witness.holoweave.org handles key thumbprint/keyid resolution (RFC 7638); use this one specifically when you have a full signed request and want end-to-end signature verification.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-15T16:26:19.180Z","isFirstParty":false}