AINumbers.co Authorization Payload API
The authorization_payload API from AINumbers.co — 1 operation(s) for authorization_payload.
Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/ainumbers-co:ainumbers-co-authorization-payload-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
OpenAPI Specification
openapi: 3.2.0
info:
title: AINumbers.co Fintech Intelligence Suite Authorization…
version: 1.0.0
description: '**1255 fintech intelligence tools** covering ISO 20022, A2A payments, CFPB §1033, EU AI Act, DORA, MiCA, AML/KYC, BaaS, DLT/tokenization, ESG/climate finance, agentic payments (AP2, ACP, x402, Visa TAP, Mastercard Agent Pay), PQC migration, sanctions screening, and OpenChainGraph v0.4 computation chains.
## Transport
> **The live transport is MCP JSON-RPC 2.0 at `https://mcp.ainumbers.co/mcp` — not REST.**
>
> This OpenAPI file is a **descriptive data-room artifact** — a machine-readable index of all tools and their input/output schemas. The REST paths (`POST /v1/tools/{name}`) described here are a projection; they become functional only if the optional REST shim (Area 2 Path B) is deployed.
>
> To call tools today, connect via the official MCP client SDKs. TypeScript: `@modelcontextprotocol/sdk`. Python: `mcp`.
## Architecture
All tools run **entirely client-side** (browser JavaScript). Zero PII. Zero server calls after page load. Deterministic, reproducible outputs. Licensed CC BY 4.0.
OpenChainGraph v0.4 compute-binding nodes additionally run **server-side on the MCP Worker** and emit verifiable artifacts with `execution_hash` (WebCrypto SHA-256 over RFC 8785 canonical JSON).'
contact:
name: Post Oak Labs
url: https://postoaklabs.com
email: tim@postoaklabs.com
license:
name: CC BY 4.0
url: https://creativecommons.org/licenses/by/4.0/
servers:
- url: https://ainumbers.co
description: Static browser-based tool host (DreamHost). Tools run client-side — no REST gateway is active on this origin. See x-mcp for the live MCP endpoint.
tags:
- name: authorization_payload
paths:
/v1/tools/lint_authorization_payload:
post:
operationId: lint_authorization_payload
summary: Authorization Payload Linter
description: 'Lints an authorization payload before it is signed, against a signing policy the caller declares. Three declared input modes: EIP-712 typed data as passed to eth_signTypedData_v4, an EIP-7702 authorization tuple, and a bare 32-byte hash about to be signed blind. Classification is string equality of the computed EIP-712 encodeType against the canonical type strings of ERC-2612, the older DAI permit struct, the five recognized Permit2 structs, the three EIP-3009 authorizations, the EntryPoint v0.8 PackedUserOperation and the OpenZeppelin v5 ForwardRequest; a primaryType carrying a known standard''s name with a different encodeType is reported as a lookalike, and anything else is reported as unrecognized rather than guessed. Every check carries a stable id and returns FLAGGED, CLEAR or NOT_EVALUATED with the field path, the observed value and the policy value. There are no numeric defaults: every threshold, allowlist, counterparty set, clock reading and chain fact is caller-declared, and a check whose input was not declared reports NOT_EVALUATED and is listed separately, never folded into a CLEAR. Zero chain reads, no signer recovery, no digest computation, and nothing is ever submitted.
**Tool URL:** https://ainumbers.co/chaingraph/art-700-authorization-payload-linter.html
**AP2/Policy Mandate export:** yes'
tags:
- authorization_payload
requestBody:
required: true
content:
application/json:
schema:
type: object
required:
- mode
properties:
mode:
type: string
enum:
- typed_data
- eip7702_tuple
- raw_hash
typed_data:
type: object
tuple:
type: object
raw_hash:
type: string
signature:
type:
- string
- object
policy:
type: object
display_hints:
type: object
responses:
'200':
description: Successful tool execution result
content:
application/json:
schema:
type: object
required:
- mode
- classification
- checks
- not_evaluated
- policy_conformance
properties:
mode:
type:
- string
- 'null'
classification:
type: object
properties:
standard:
type: string
primary_type:
type:
- string
- 'null'
encode_type:
type:
- string
- 'null'
witness_type:
type:
- string
- 'null'
witness_is_named_payment_witness:
type: boolean
lookalike:
type: boolean
entry_count:
type:
- integer
- 'null'
payment_method:
type: string
checks:
type: array
items:
type: object
required:
- id
- status
properties:
id:
type: string
status:
type: string
enum:
- FLAGGED
- CLEAR
- NOT_EVALUATED
severity:
type: string
field_path:
type:
- string
- 'null'
observed: {}
policy: {}
not_evaluated:
type: array
items:
type: string
evaluated_count:
type: integer
flagged_count:
type: integer
policy_conformance:
type: string
enum:
- CONFORMS
- DEVIATES
- INDETERMINATE
display:
type: array
handoffs:
type: object
signature_form:
type:
- object
- 'null'
warnings:
type: array
items:
type: string
scope_note:
type: string
x_schema_provenance: derived-from-golden-fixtures 2026-09-29 (28 vectors, chaingraph/kernels/fixtures/art-700-authorization-payload-linter.fixtures.json)
x-mcp-tool-name: lint_authorization_payload
x-tool-url: https://ainumbers.co/chaingraph/art-700-authorization-payload-linter.html
x-source: manifest
x-ap2-export: true
x-mcp:
transport: MCP JSON-RPC 2.0 (streamable HTTP)
endpoint: https://mcp.ainumbers.co/mcp
protocol_version: '2025-11-25'
authentication: none
registry: co.ainumbers/tools (official MCP registry)
note: Connect any MCP-compatible client (Claude, ChatGPT, custom agent) directly to this endpoint. The REST paths in this file are descriptive only — they do not exist on the live server unless the REST shim is deployed.