{"id":"signature_agent_card","listed_week":"2026-W33","name":"The Calling Card","price_usdc":2,"pricing":"fixed","fulfillment":"instant","description":"You stood up Web Bot Auth: your crawler signs its requests (RFC 9421) and your key directory hangs at /.well-known/http-message-signatures-directory. This is somebody who is not you saying it actually works. Name your origin or directory URL (the url query parameter) and the store fetches the document once and signs the readout: reachable, right media type, well-formed Ed25519 keys, and the proof-of-possession signature checked against the keys you list. The look is free at POST /api/bot-auth/check — what this buys is the artifact: a signed card whose evidence hash is bound into your purchase certificate, served at a stable URL forever, quotable to any origin or directory that wants more than your word. One fetch, one moment. Not an endorsement, not an identity check on who holds the key, and it says nothing about whether your requests are actually signed — it is the card that says your published half is in order.","note_402":"Two dollars. The checking is free and stays free — what costs money is the version somebody else will believe.","constraints":["Give your origin or directory URL in the url query parameter: https, default port, on the public internet","A bare origin is checked at /.well-known/http-message-signatures-directory; a full URL is fetched as given","One GET at one moment, signed; never a monitor","We refuse our own hostname — our directory carrying our own card would be the instrument vouching for itself","The card URL is free to read forever"],"buy_url":"https://scvd.store/api/buy/signature_agent_card","task":"Show origins my crawler's Web Bot Auth key directory is set up right, with somebody who is not me saying so","price_tiers_usdc":[2],"spec":{"capability":"A signed JSON card — verdict (directory_ready, not_ready, unreachable or refused), every check from the directory battery by name including the proof-of-possession verification, dated, its evidence hash bound into the purchase certificate's attests field — plus a stable card URL serving the record free forever. Instant; one GET at one moment, never monitoring.","why_use":"a dated, signed observation that an agent's Web Bot Auth key directory is in order, proof-of-possession verified — free at POST /api/bot-auth/check; this is the same battery with a signature, a certificate binding, and a permanent card URL an origin checks without us. About the document, never the operator.","inputs":{"properties":{"agent_name":{"type":"string","description":"Optional name to put on the certificate and patron badge, up to 80 characters."},"url":{"type":"string","format":"uri","description":"Your origin, or your key directory's full URL: https, default port, on the public internet. A bare origin is checked at /.well-known/http-message-signatures-directory; a full URL is fetched as given. One GET at one moment, run against the published battery and signed. We refuse our own hostname."}},"required":["url"]},"outputs":{"delivery":"delivered in the purchase response, same request","always_included":["signed certificate (ed25519)","sequential patron number","badge_url","verify_url"]},"verification":{"verify_url":"https://scvd.store/api/verify/{id}","cost":"free, unlimited, forever","signing_key":"https://scvd.store/.well-known/scvd-signing-key","key_history":"https://scvd.store/.well-known/scvd-signing-key","sample_artifact_id":"cert_4dww28dx5j","sample_verify_url":"https://scvd.store/api/verify/cert_4dww28dx5j","certificate_binds":["cert_id","item","patron_number","date","paid_usdc","asset","network","payer","settlement_tx"],"certificate_binds_note":"All of these ride INSIDE the signed bytes, not beside them: paid_usdc is the total settled (not the tip), payer is the paying wallet — chain-verifiable, unlike a chosen name — and settlement_tx is the on-chain transaction, so this certificate and a Base explorer are the same fact checked twice. Any field shown but not signed is named as such in the verify response rather than left to be discovered.","rights":"https://scvd.store/rights","attestation":"Signed by the store's key, not yours: a claim the certificate carries can be checked by a third party without trusting your self-report."},"constraints":["Give your origin or directory URL in the url query parameter: https, default port, on the public internet","A bare origin is checked at /.well-known/http-message-signatures-directory; a full URL is fetched as given","One GET at one moment, signed; never a monitor","We refuse our own hostname — our directory carrying our own card would be the instrument vouching for itself","The card URL is free to read forever"],"price":{"amount_usdc":2,"pricing":"fixed","tiers_usdc":[2],"currency":"USDC","network":"Base (eip155:8453)","protocol":"x402 v2"}},"guaranteed":["signature validity forever","verification free forever","price as displayed","delivery format as specified"],"not_guaranteed":["fitness for your particular task","future protocol compatibility beyond stated interfaces","human-labor turnaround faster than posted SLA"],"fulfillment_state":{"class":"instant","shutter":"open"},"markdown_note":"This same URL serves markdown when the Accept header prefers text/markdown."}