Skip to main content
API docs by Redocly

#trstd <protocol> - Verification API (1.0.0)

Download OpenAPI specification:Download

URL: https://example.org License: Apache-2.0

The #trstd enables AI agents to assess the trustworthiness of websites and agentic services through machine-readable, independently verified trust signals.

Retrieve trust signals for an entity

Returns all trust signals the authority holds for the given entity. The entity is addressed by its entityId in the URL path. The agent sends the URL it is verifying as a query parameter; the server validates that the URL falls within the entity's scope. The response is signed by the authority using Ed25519.

Authorizations:
didWebJwtNone
path Parameters
entityId
required
string [ 1 .. 128 ] characters ^[A-Za-z0-9._~-]+$
Example: d6f2fdf4-f829-4ce6-a1cc-e2bd957709db

The entity ID extracted from the link tag's href path (opaque, authority-defined format). Constrained to the RFC 3986 unreserved character set so it is safe as a URL path segment without encoding.

query Parameters
url
required
string <uri>
Example: url=https://www.example.org/de/products/123

The full URL the agent is verifying, including query parameters. Entity matching uses only hostname and path, but the authority receives the complete URL. Query parameters may contain session or user context — see the Security specification for the privacy tradeoff.

context
string
Example: context=purchase

The agent's intent for this verification. The authority uses this to tailor the optional assessment section in the response. Well-known values: purchase, inquiry, high-value. Authorities MUST ignore values they do not recognize and MAY omit the assessment or return a generic one. Agents and authorities MAY use additional values beyond the well-known set.

Responses

Response samples

Content type
application/json
{
  • "meta": {
    },
  • "signals": [
    ],
  • "assessment": {
    },
  • "kid": "authority-key-1",
  • "signature": "pV2qFz8kRn0LhVbUqSSR3IyzQlDu5XbE0MwvMXfBjlNRqIjmGT6c2Eq..."
}