{"uid":"cap_x9vKXzpsRLQ24iJnM5Z66","slug":"animica-post-quantum-ml-dsa-65-document-signing-3cc37b6f","name":"Animica Post-Quantum ML-DSA-65 Document Signing","description":"Get a post-quantum ML-DSA-65 signature (FIPS 204, scheme 4099 — the same scheme the Animica L1 admits transactions with) over a document you never have to send us. Post a sha256 digest, or post a JSON payload and we canonicalise and hash it here; either way the signature covers the HASH, so the resulting envelope can be published, escrowed or put on-chain without disclosing the content. Buy this when a claim has to stay checkable by a third party years from now — a dataset manifest, a model card, an audit-log segment, a delivery receipt between two agents, the exact bytes of an agreement — because an HMAC proves nothing to anyone but its issuer and an ECDSA signature made today is retrospectively forgeable once a cryptographically-relevant quantum computer exists. You need no PQ library and no key of your own. Verification is FREE (POST /x402/pq/sign/verify) and the signing public key is FREE (GET /x402/pq/sign/pubkey), so anyone can check an envelope offline without paying us. The signed statement records whether YOU or WE computed the digest, because those are different claims. If the signer or its key is not reachable you get a 503 with the reason and are NOT charged — this endpoint has no branch that returns an unsigned envelope.","url":"https://animica.dev/x402/pq/sign","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"label":{"type":"string","description":"your own annotation for what this covers, up to 128 printable ASCII characters; signed, and marked in the envelope as the client's claim"},"digest":{"type":"string","description":"64 hex characters — the 32-byte digest of your document. Send this OR payload, never both. Your document never leaves your side."},"payload":{"type":"object","description":"a JSON value to canonicalise and SHA-256 here instead of sending a digest. Hashed and dropped: never stored, logged or returned."},"digest_alg":{"type":"string","description":"how YOU computed digest, recorded in the signature as your declaration: sha256, sha3-256, keccak-256, blake2b-256. Omit it and the signature says sha256 with document_digest_alg_source:'assumed_default' — a default, marked as one, never presented as something you stated. With payload it must be omitted or sha256, which is what we run."}}},"responseSchema":{"type":"json"},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.0018","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.0018/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.0018","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.0018","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_YWZozcltuRuDBWzFS9e9t","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.0018","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Creates a FIPS 204 ML-DSA-65 post-quantum digital signature over a document hash or JSON payload, returning a verifiable envelope without exposing the original document.","exampleAgentPrompt":"Sign this SHA-256 digest 'a3f1c9e2b7d4...8f0e' with the label 'model-card-v2-release' using a post-quantum ML-DSA-65 signature on Animica — I need an envelope I can publish or put on-chain that will still be verifiable even after quantum computers exist.","exampleUseCases":[{"title":"Dataset manifest notarization","prompt":"I need a quantum-safe signature over this dataset manifest's SHA-256 digest 'b4e8d2f7a1c09e3b56f1234abcd567890ef12345678901234abcdef1234567890' — label it 'training-dataset-v3-manifest' so the claim is clear in the envelope. I want anyone to be able to verify it offline years from now without relying on classical ECDSA."},{"title":"Agent-to-agent delivery receipt","prompt":"Generate a post-quantum ML-DSA-65 signature over this JSON receipt payload to act as a tamper-evident delivery confirmation between our two agent systems — label it 'order-delivery-receipt-2025-07-10' and use the Animica signing service so the envelope can be escrowed and checked by a third party later."},{"title":"Audit log segment attestation","prompt":"I have a 32-byte keccak-256 digest 'f7a3c1e9b204d6f8a0b1c2d3e4f5a6b7c8d9e0f1a2b3c4d5e6f7a8b9c0d1e2f3' of our quarterly audit log — sign it with ML-DSA-65, label it 'q2-2025-audit-log-segment', and declare the digest algorithm as keccak-256 so the signature envelope records exactly how we computed the hash."}],"resultDescription":"A signed envelope containing the ML-DSA-65 signature (FIPS 204 scheme 4099), the hash that was signed, the client-supplied label, the declared digest algorithm (or a marked default), a reference to the signing public key for offline verification, and metadata indicating the signature scheme — all without the original document ever leaving the caller's custody.","failureModes":["Both digest and payload provided simultaneously — endpoint rejects with an error requiring exactly one","Digest is not exactly 64 hex characters — returns validation error","Label exceeds 128 printable ASCII characters — rejected","Non-JSON or malformed payload when using payload mode — canonicalization fails","digest_alg specified alongside payload mode as something other than sha256 — rejected","Service temporarily unavailable — HTTP 503 with retry guidance","Payment not included or insufficient — HTTP 402 challenge with price details"],"whenToPreferThis":"Choose this endpoint when you need a signature that remains verifiable by third parties years or decades from now without trusting a shared HMAC secret, and when the long-term threat of cryptographically-relevant quantum computers makes classical ECDSA signatures unacceptable. It is ideal when the document itself must not be disclosed but a signed commitment to its exact bytes is required — for dataset manifests, model cards, audit log segments, inter-agent delivery receipts, or any legally or compliance-relevant artifact. It is preferable to HMAC (which proves nothing to third parties) and to classical ECDSA (which is retrospectively vulnerable to quantum adversaries).","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-14T00:46:43.772Z","isFirstParty":false}