# Identity Records - Scope Boundary Audit

> Identity Records - Scope Boundary Audit is a paid API for AI agents from www.mahastrategies.com, paid per call via x402, $0.038306/call, status unknown (last checked 2026-10-16).

Validates that declared identity record rows match exact owner, subject, revision, and allowed scope labels for nonpersonal, offline metadata — no live resolution or signature verification.

## Facts

- Endpoint: POST https://www.mahastrategies.com/api/v1/verify/identity-records/scope-boundary-audit?utm_source=zero.xyz
- Price: $0.038306/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-16
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/identity-records-scope-boundary-audit-975b06ba
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_DvUnbvyWRQgFs1L27xPTB

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability identity-records-scope-boundary-audit-975b06ba -d '<json body>'
```

Example prompt: Can you audit these 12 identity record rows to check that every row matches ownerRef 'org-abc', subjectRef 'agent-007', revision 'r3', and only uses the allowed scopes ['read:profile','read:logs'] — the data class is public and this is nonpersonal metadata?

## When to prefer this

Choose this endpoint when you need a lightweight, offline, typed audit of nonpersonal identity record metadata for exact scope label boundary conformance — without triggering any live DID resolution, revocation lookup, key custody, or signature verification. Ideal for pre-publication checks on agent credential declarations where the data class is public or synthetic and all records are explicitly nonpersonal. Not suitable when you need live identity verification, cryptographic signature checks, or person-linked identity certification.

## Known failure modes

- Rows array empty or exceeds 32 items — request rejected
- nonpersonalMetadata not set to true (const) — validation error
- dataClass not 'public' or 'synthetic' — enum validation failure
- allowedScopes array exceeds 16 items or is empty — rejected
- ownerRef or subjectRef missing — incomplete audit, partial or error result
- Malformed revision string — may produce inconclusive row matches
- Results expired after 24 hours — receipt metadata only available after that point

## How this service works

Enforce exact declared owner, subject, revision and allowed scope labels; a matching label grants no permission or access for public nonpersonal agent credential declarations. No DID resolution, live revocation lookup, signature verification, person identification, key custody or identity certification. Offline typed nonpersonal metadata only. Result retention: 24 hours; minimal receipt metadata: 90 days.

## Output

Returns a per-row audit result indicating whether each identity record row conforms to the declared ownerRef, subjectRef, revision, and allowed scope labels. Results include pass/fail status per row, any scope label mismatches, and a minimal receipt. Full results are retained for 24 hours; minimal receipt metadata is retained for 90 days. No live DID resolution, signature verification, or identity certification is performed.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "rows": {
   "type": "array",
   "maxItems": 32,
   "minItems": 1
  },
  "ownerRef": {
   "type": "string"
  },
  "revision": {
   "type": "string"
  },
  "dataClass": {
   "enum": [
    "public",
    "synthetic"
   ],
   "type": "string"
  },
  "subjectRef": {
   "type": "string"
  },
  "allowedScopes": {
   "type": "array",
   "maxItems": 16,
   "minItems": 1
  },
  "nonpersonalMetadata": {
   "type": "boolean",
   "const": true
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/identity-records-scope-boundary-audit-975b06ba/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from www.mahastrategies.com](https://www.zero.xyz/host/www.mahastrategies.com/llms.txt)