@APIR Agent Verification
Basic information
APIR is the evidence record for AI agents. Its MCP server answers two questions about an agent you did not build: is it who it claims to be, and is it acting inside a human mandate. Credentials are signed with Ed25519 and the public keys are published, so any answer can be rechecked offline without trusting APIR.
https://apir.ai/api/mcpclaude mcp add apir-agent-verification --transport http https://apir.ai/api/mcpCheck whether an AI agent carries a real, cryptographically signed credential. Accepts an agent name, a credential id (TP-...), an agent UUID, a domain or a DID. Returns one of seven verdicts: VERIFIED, EXPIRED, REVOKED, SUPERSEDED, UNSIGNED, UNCHECKED or NO_RECORD. IMPORTANT for interpreting the answer: VERIFIED means the Ed25519 signature recomputes against the key published at apir.ai and the credential is unexpired and unrevoked. It confirms WHO issued the credential and that its contents are unaltered. It is NOT a guarantee that the agent behaves well. NO_RECORD is an honest, first-class answer: it means nothing is on file, which is not evidence of wrongdoing and not a warning. It means any claim the agent makes about itself is unverified. Free, unauthenticated, and no account is required.
Resolve the human mandate behind an AI agent: which actions a named person actually permitted, any value cap, the expiry, and whether the grant itself is signed. Where authority was delegated agent to agent, the full chain is walked back to the human at the root, and one law is enforced at every hop: authority may only ever narrow. No hop can hold an action, a target or a spending cap wider than the hop above it, and the root must be a human. Use this before letting an agent transact, sign, spend or commit on someone else's behalf. An agent holding a valid credential may still be acting outside its mandate, and those are different questions. The answer is the mandate on file as of checked_at. It is not proof the permission still holds at the moment the action runs: check again at the point of action, and treat a record as proof of what was recorded and when.
Return the Ed25519 public keys APIR publishes, so a signature can be recomputed offline without trusting any APIR response, including this one. Keys are published as a JWKS at apir.ai/.well-known/jwks.json and as did:web:apir.ai. Retired keys stay published so older credentials still verify.
APIR is the evidence record for AI agents. Its MCP server answers two questions about an agent you did not build: is it who it claims to be, and is it acting inside a human mandate. Credentials are signed with Ed25519 and the public keys are published, so any answer can be rechecked offline without trusting APIR.
This listing was submitted by the publisher.
https://apir.ai/api/mcp (Streamable HTTP)Claude Code:
claude mcp add apir-agent-verification --transport http https://apir.ai/api/mcp
Other clients (mcpServers config):
{ "mcpServers": { "apir-agent-verification": { "type": "http", "url": "https://apir.ai/api/mcp" } } }
Read from the server's tools/list on 2026-11-08:
verify_agent — Check whether an AI agent carries a real, cryptographically signed credentialcheck_authority — Resolve the human mandate behind an AI agent: which actions a named person actually permitted, any value cap, the expiry, and whether the grant itself is signedget_verification_keys — Return the Ed25519 public keys APIR publishes, so a signature can be recomputed offline without trusting any APIR response, including this oneinitialize request when checked on 2026-11-08.Sources: Submission.
The APIR Agent Verification remote MCP server is a hosted Model Context Protocol endpoint at https://apir.ai/api/mcp, so AI assistants can connect to it without installing or running anything locally.
Add the endpoint https://apir.ai/api/mcp to any MCP-compatible client such as Claude Code, Cursor, or VS Code. The setup snippets on this page configure each client in one step.
No. APIR Agent Verification's MCP server does not require authentication — you can connect directly with the endpoint URL.
APIR Agent Verification exposes a streamable-http endpoint, the transport used by remote MCP servers and supported by all major MCP clients.
AIsa is one key for 950+ data APIs across SEO and AI visibility, finance, social, web search, sales and agent mail — the go-to-market data stack behind prospecting, competitor research and brand monitoring. Five tools ra
Discover, evaluate, and buy solutions for the cloud
%20-%20Sarah%20Xu.svg){kind=icon}
Manage your Adobe Experience Manager content
Check one exact Gold Coast or Brisbane City property address. Free address/coverage check and short summary; paid structured Agent JSON adds available building, street and surrounding context, with Brisbane routed journe
Research competitors' winning ads, clone them for your brand and launch paused campaigns on Meta, Google and TikTok from chat.
Comments