# ForgeMesh Download Integrity Check

> ForgeMesh Download Integrity Check is a paid API for AI agents from x402.forgemesh.io, paid per call via x402, $0.005/call, status unknown (last checked 2026-09-15).

Fetches a remote file into memory, computes its cryptographic hash using a chosen algorithm, and returns the digest without writing the file to disk.

## Facts

- Endpoint: POST https://x402.forgemesh.io/download-integrity-check
- Price: $0.005/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/forgemesh-download-integrity-check-1ecd8fc3
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_LpD-8_wfb5-4g-YyudeZe

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability forgemesh-download-integrity-check-1ecd8fc3 -d '<json body>'
```

Example prompt: Can you check the SHA-256 hash of the installer at https://releases.example.com/myapp-v2.1.0-linux.tar.gz without saving it to disk? I want to verify it matches the checksum the developer published.

## When to prefer this

Use this endpoint when you need to verify the integrity of a remote file (installer, binary, archive) without downloading it to local disk first. It is ideal for pre-execution tamper detection, mirror comparison, and CI/CD pipelines where ephemeral hashing is preferred over persisting files. Choose this over a local hash utility when the agent does not have filesystem access or wants to avoid writing potentially malicious files to disk.

## Known failure modes

- URL is unreachable or returns a non-200 response — endpoint cannot fetch the file
- File is too large to hash in memory — may time out or return an error
- Invalid or unsupported hash algorithm specified — returns an error
- Malformed URL input — returns a validation error
- Network timeout fetching the remote resource

## How this service works

Hashes a remote file in memory and returns the digest in your choice of algorithm, discarding the file immediately afterward, no local disk write required. Useful for verifying installer integrity, comparing mirror copies of the same release, and catching a tampered or corrupted download before it's executed.

## Output

Returns the cryptographic digest of the remote file computed in memory using the specified algorithm (default sha256), without any local disk write. The agent receives the hash string it can compare against a known-good checksum.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "url": {
   "type": "string"
  },
  "algorithm": {
   "type": "string",
   "description": "sha256 default"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "hex": "eefffad4e662b2821b1aab5957d4dcc60ac6e19fd5523ec59dad6d29deac64e1",
  "bytes": 53647,
  "algorithm": "sha256"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/forgemesh-download-integrity-check-1ecd8fc3/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from x402.forgemesh.io](https://www.zero.xyz/host/x402.forgemesh.io/llms.txt)