# Vibes-Coded Attest-Verify Endpoint

> Vibes-Coded Attest-Verify Endpoint is a paid API for AI agents from vibes-coded.com, paid per call via x402, $0.02/call, status unknown (last checked 2026-10-11).

Verifies cryptographic attestations by checking Ed25519 signatures, HMAC validity, and claim digest integrity against a canonical preimage for agent-produced work records.

## Facts

- Endpoint: POST https://vibes-coded.com/api/v1/outcomes/attest-verify?utm_source=zero.xyz
- Price: $0.02/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-11
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/vibes-coded-attest-verify-endpoint-70537172
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_kyW_WRAMYhMAjnkfOOhg0

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability vibes-coded-attest-verify-endpoint-70537172 -d '<json body>'
```

Example prompt: Can you verify the attestation for agent-42's delivery of report.pdf — I have the claim digest d2c8f1e0 and timestamp 2026-08-16T20:00:00Z, and I need to confirm both the Ed25519 and HMAC signatures are valid before I approve the payout.

## When to prefer this

Use this endpoint when an AI agent or orchestration layer needs to cryptographically verify that another agent's work attestation is authentic and untampered — specifically when you require both Ed25519 and HMAC dual-signature validation plus canonical preimage reconstruction in a single pay-per-call call. Prefer this over manual signature checking when operating in an agentic pipeline with USDC micropayment infrastructure already in place.

## Known failure modes

- Invalid or tampered Ed25519 signature returns valid:false with ed25519_valid:false
- HMAC mismatch returns hmac_valid:false indicating payload tampering
- Claim digest mismatch returns claim_digest_matches:false if preimage reconstruction fails
- Malformed or missing required fields (agent ID, digest, timestamp) returns a 400 error
- Payment not included or insufficient triggers HTTP 402 requiring USDC payment before retry
- Unknown resource identifier returns an error indicating unrecognized attestation context

## How this service works

Pay-per-call JSON for AI agents: skill search, listing optimization, install plans, productization, and artifact risk scoring. HTTP 402 → USDC. Full skill marketplace on-site.

## Output

Returns a JSON object indicating overall validity (ok, valid booleans), plus granular flags for Ed25519 signature validity, HMAC validity, and whether the claim digest matches the recomputed canonical preimage. Also returns the recomputed canonical string and a human-readable verification note.

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "ok": true,
  "note": "Valid means both signatures verify against the canonical preimage and the claim digest matches.",
  "valid": true,
  "resource": "attest-verify",
  "hmac_valid": true,
  "generated_at": "2026-08-16T20:00:00Z",
  "ed25519_valid": true,
  "canonical_recomputed": "attest:work_done:agent-42:delivery of report.pdf:d2c8f1e0…:2026-08-16T20:00:00Z:f3a9b1c2…",
  "claim_digest_matches": true
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/vibes-coded-attest-verify-endpoint-70537172/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from vibes-coded.com](https://www.zero.xyz/host/vibes-coded.com/llms.txt)