# DDG Web Bot Auth (WBA) Signature Verifier

> DDG Web Bot Auth (WBA) Signature Verifier is a paid API for AI agents from agents.daedalusdevelopmentgroup.com, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-20).

Verifies an RFC 9421 + Web Bot Auth HTTP message signature, returning a per-step structured report covering key resolution, component validation, nonce/timestamp policy, and Ed25519 cryptographic verification.

## Facts

- Endpoint: POST https://agents.daedalusdevelopmentgroup.com/v1/wba/verify?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-20
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/ddg-web-bot-auth-wba-signature-verifier-0764fc16
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_Dej1dPP27xg-xj-WRNgSq

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability ddg-web-bot-auth-wba-signature-verifier-0764fc16 -d '<json body>'
```

Example prompt: Check whether this incoming agent HTTP POST request has a valid Web Bot Auth signature — resolve the keyId against the Signature-Agent directory, confirm the nonce and timestamps are within policy, and run the Ed25519 crypto check, then give me the full per-step report.

## When to prefer this

Use this endpoint when you need a rigorous, step-by-step audit of a Web Bot Auth (RFC 9421 + draft-meunier-webbotauth-httpsig-protocol) HTTP message signature — especially when you need to distinguish exactly which layer failed (key resolution, nonce policy, timestamp policy, component validation, or Ed25519 crypto). Prefer this over generic JWT or OAuth validators when the signature follows the structured-field dictionary format and involves Signature-Agent key directories or Ed25519 keys. It is machine-payable via x402 at $0.01 USDC per call, making it suitable for per-request automated agent authentication pipelines.

## Known failure modes

- Invalid or malformed structured-field dictionary signature header returns parse error in report
- KeyId not found in Signature-Agent directory and no inline public_key_jwk provided causes key resolution failure
- Nonce reuse or expired nonce triggers nonce policy failure step
- created or expires timestamps outside acceptable window cause timestamp policy rejection
- URL-key pairing rule violation reported as pairing check failure
- Ed25519 signature byte mismatch returns crypto verification failure
- Unsupported signature component or parameter causes component validation error
- Missing required input fields (type, method, bodyType, body) returns 400-level error
- Payment not included or insufficient USDC causes x402 payment required response

## How this service works

Verify a Web Bot Auth (RFC 9421 + draft-meunier-webbotauth-httpsig-protocol) request signature: structured-field dictionary form, supported components/params, keyid resolution against the Signature-Agent key directory (or an inline public_key_jwk), the (URL, key) pairing rule, created/expires/nonce policy, and Ed25519 crypto verification. Pure verification, per-step report.

## Output

A JSON object with a boolean 'ok' field indicating overall pass/fail, plus a structured per-step report covering: Signature-Agent key directory resolution (or inline JWK acceptance), (URL, key) pairing rule check, structured-field dictionary parsing result, supported components and parameters validation, created/expires/nonce policy evaluation, and Ed25519 cryptographic verification outcome. Each step reports its individual pass/fail status and relevant details.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input",
  "output"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method",
    "bodyType",
    "body"
   ],
   "properties": {
    "body": {
     "type": "object"
    },
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "POST",
      "PUT",
      "PATCH"
     ],
     "type": "string"
    },
    "bodyType": {
     "enum": [
      "json",
      "form-data",
      "text"
     ],
     "type": "string"
    }
   },
   "additionalProperties": true
  },
  "output": {
   "type": "object",
   "required": [
    "type",
    "example"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "ok": true
    }
   },
   "additionalProperties": true
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "ok": true
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/ddg-web-bot-auth-wba-signature-verifier-0764fc16/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from agents.daedalusdevelopmentgroup.com](https://www.zero.xyz/host/agents.daedalusdevelopmentgroup.com/llms.txt)