network.attested.verify

johnandersen777.bsky.social View official

Documentation

Verify the attestations on a record. Resolves the record at `uri`, recomputes the canonical attestation CID, and checks each entry in its signatures array: inline network.attested.signature entries are verified by ECDSA against `key`; remote strongRefs are resolved to network.attested.proof records whose `cid` must match the subject's canonical CID. Any network.attested.* speaker can call this to verify without re-deriving the CID machinery.

main query

Verify the attestations on a record. Resolves the record at `uri`, recomputes the canonical attestation CID, and checks each entry in its signatures array: inline network.attested.signature entries are verified by ECDSA against `key`; remote strongRefs are resolved to network.attested.proof records whose `cid` must match the subject's canonical CID. Any network.attested.* speaker can call this to verify without re-deriving the CID machinery.

Parameters

uri string at-uri Required

AT-URI of the record to verify.

Output

Encodingapplication/json
cid stringcid Optional

The canonical attestation CID computed for the resolved record.

uri stringat-uri Required

An AT Protocol URI (e.g., at://did:plc:xyz/app.bsky.feed.post/abc).

valid boolean Required

True if at least one attestation verified against the resolved record.

workflow string Optional

Optional workflow identifier the caller can use to require a specific set of attestation roles.

Try It

Requests are sent directly from your browser. Some servers may block requests due to CORS.

Base URL for XRPC calls (e.g., https://api.bsky.social)
Parameters
AT-URI of the record to verify.
View raw schema 
{
  "type": "query",
  "output": {
    "schema": {
      "type": "object",
      "required": [
        "uri",
        "valid",
        "signatures"
      ],
      "properties": {
        "cid": {
          "type": "string",
          "format": "cid",
          "description": "The canonical attestation CID computed for the resolved record."
        },
        "uri": {
          "type": "string",
          "format": "at-uri"
        },
        "valid": {
          "type": "boolean",
          "description": "True if at least one attestation verified against the resolved record."
        },
        "workflow": {
          "type": "string",
          "description": "Optional workflow identifier the caller can use to require a specific set of attestation roles."
        },
        "signatures": {
          "ref": "network.attested.signature#signatures",
          "type": "ref",
          "description": "The verified signature entries (inline and/or remote strongRefs)."
        }
      }
    },
    "encoding": "application/json"
  },
  "parameters": {
    "type": "params",
    "required": [
      "uri"
    ],
    "properties": {
      "uri": {
        "type": "string",
        "format": "at-uri",
        "description": "AT-URI of the record to verify."
      }
    }
  },
  "description": "Verify the attestations on a record. Resolves the record at `uri`, recomputes the canonical attestation CID, and checks each entry in its signatures array: inline network.attested.signature entries are verified by ECDSA against `key`; remote strongRefs are resolved to network.attested.proof records whose `cid` must match the subject's canonical CID. Any network.attested.* speaker can call this to verify without re-deriving the CID machinery."
}

Lexicon Garden

@