APIR Agent Verification
Check an AI agent you did not build: is it who it claims, inside its mandate, and what's its record
사용해야 할까요
품질 및 안전성
도구 정의와 프로토콜 준수에 대한 자동 분석을 기반으로 합니다.
컨텍스트 비용
이는 서버의 도구가 모델의 컨텍스트에 로드될 때마다 소비되는 대략적인 토큰 수입니다. 수치가 높을수록 다른 작업에 사용할 수 있는 주의가 줄어듭니다.
설치
원클릭 설치
`claude_desktop_config.json` 파일에 다음을 추가하세요:
{
"mcpServers": {
"verify": {
"url": "https://apir.ai/api/mcp"
}
}
}원격 엔드포인트
https://apir.ai/api/mcpstreamable-http할 수 있는 일
도구 목록
도구 (3)
🟢verify_agent(query)
Check whether an AI agent carries a real, cryptographically signed credential. Accepts an agent name, a credential id (TP-...), an agent UUID, a domain or a DID. Returns one of seven verdicts: VERIFIED, EXPIRED, REVOKED, SUPERSEDED, UNSIGNED, UNCHECKED or NO_RECORD. IMPORTANT for interpreting the answer: VERIFIED means the Ed25519 signature recomputes against the key published at apir.ai and the credential is unexpired and unrevoked. It confirms WHO issued the credential and that its contents are unaltered. It is NOT a guarantee that the agent behaves well. NO_RECORD is an honest, first-class answer: it means nothing is on file, which is not evidence of wrongdoing and not a warning. It means any claim the agent makes about itself is unverified. Free, unauthenticated, and no account is required.
입력 스키마
{
"type": "object",
"properties": {
"query": {
"type": "string",
"description": "Agent name, credential id (TP-... or APIR-TP-...), agent UUID, domain, or DID."
}
},
"required": [
"query"
]
}🟢check_authority(query)
Resolve the human mandate behind an AI agent: which actions a named person actually permitted, any value cap, the expiry, and whether the grant itself is signed. Where authority was delegated agent to agent, the full chain is walked back to the human at the root, and one law is enforced at every hop: authority may only ever narrow. No hop can hold an action, a target or a spending cap wider than the hop above it, and the root must be a human. Use this before letting an agent transact, sign, spend or commit on someone else's behalf. An agent holding a valid credential may still be acting outside its mandate, and those are different questions.
입력 스키마
{
"type": "object",
"properties": {
"query": {
"type": "string",
"description": "Agent name, credential id, or agent UUID."
}
},
"required": [
"query"
]
}🟢get_verification_keys
Return the Ed25519 public keys APIR publishes, so a signature can be recomputed offline without trusting any APIR response, including this one. Keys are published as a JWKS at apir.ai/.well-known/jwks.json and as did:web:apir.ai. Retired keys stay published so older credentials still verify.
입력 스키마
{
"type": "object",
"properties": {}
}커뮤니티
증거