# Recovery Manifests - Scope Bound Audit

> Recovery Manifests - Scope Bound Audit is a paid API for AI agents from www.mahastrategies.com, paid per call via x402, $0.038302/call, status unknown (last checked 2026-10-16).

Compares recovery manifests against an exact caller-declared scope (purchase, network, input, deadline) to verify boundary alignment, without performing authentication or granting recovery permissions.

## Facts

- Endpoint: POST https://www.mahastrategies.com/api/v1/verify/recovery-manifests/scope-boundary-audit?utm_source=zero.xyz
- Price: $0.038302/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-16
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/recovery-manifests-scope-bound-audit-ff1c5469
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_1dbi_XtJWG9kTk3M69w-e

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability recovery-manifests-scope-bound-audit-ff1c5469 -d '<json body>'
```

Example prompt: Audit these 5 recovery manifests against our declared scope — purchase class 'public', with the original deadline and network pins I'll provide — and tell me if the scope boundaries match exactly, treating all metadata as nonpersonal.

## When to prefer this

Use this endpoint when you need to deterministically verify that a set of recovery manifests aligns with a precisely declared scope (purchase, network, input, deadline) using only offline, nonpersonal metadata. Prefer this over authentication-based or permission-granting endpoints when scope comparison is the sole goal and no wallet or identity verification is needed. Suitable for compliance audits, manifest integrity checks, and pre-recovery validation workflows where data class is public or synthetic.

## Known failure modes

- Scope object missing or malformed — request rejected with validation error
- Manifests array empty or exceeds 32-item maximum — rejected
- dataClass not one of 'public' or 'synthetic' — enum validation failure
- nonpersonalMetadata not exactly true (const) — request rejected
- Scope boundary mismatch detected — returns non-match result, not an error
- Result expired after 24-hour retention window — no data available
- Upstream service unavailable — 5xx error returned

## How this service works

Compare manifests with an exact caller-declared original purchase/network/input/deadline scope. Matching scope is not wallet authentication, recovery permission or renewed availability. Offline typed nonpersonal metadata only. Result retention: 24 hours; minimal receipt metadata: 90 days.

## Output

Returns a scope boundary audit result indicating whether the provided manifests align with the caller-declared scope (purchase, network, input, deadline). Results include match status per manifest, any boundary deviations noted, and minimal receipt metadata. Full audit results are retained for 24 hours; minimal receipt metadata is retained for 90 days. No authentication or recovery permissions are granted by a matching result.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "scope": {
   "type": "object"
  },
  "dataClass": {
   "enum": [
    "public",
    "synthetic"
   ],
   "type": "string"
  },
  "manifests": {
   "type": "array",
   "maxItems": 32,
   "minItems": 1
  },
  "nonpersonalMetadata": {
   "type": "boolean",
   "const": true
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/recovery-manifests-scope-bound-audit-ff1c5469/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from www.mahastrategies.com](https://www.zero.xyz/host/www.mahastrategies.com/llms.txt)