The Conformance API from CrawlCheck — 1 operation(s) for conformance.
1 of 1 operations are conformant: apis.io called them with no credentials and the responses matched this contract. Checked 2026-11-12. how this works · status file
Every API here is available over the APIs.io API and to AI agents over MCP.
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.curl "https://apis.io/api/v1/apis/crawlcheck-io:crawlcheck-io-conformance-api"curl "https://apis.io/api/v1/apis?limit=25"Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
openapi: 3.2.0
info:
title: Crawlcheck Io Conformance API
version: '1'
contact:
name: CrawlCheck
url: https://crawlcheck.io/policy
email: hello@crawlcheck.io
license:
name: Terms
url: https://crawlcheck.io/policy
x-core-contract:
promise: 'These operations are the core contract. They stay at /api/v1 and keep answering for at least 180 days after any /api/v2 is announced; their stable fields change only in a new major version, and their provisional fields only after 30 days'' notice, per /docs/api/compatibility. Verifying what they return needs none of these calls: crawlcheck-verify.mjs checks a document on your machine against the published keys (/.well-known/http-message-signatures-directory) and the rotation record, read once with --online or saved for --keys. Everything else documented here is useful but secondary, and may change with the notice its fields'' tags promise.'
operations:
- method: GET
path: /api/v1/resolve
operationId: resolveDomainV1
- method: POST
path: /api/v1/resolve
operationId: resolveBatchV1
- method: POST
path: /api/v1/preflight
operationId: preflightV1
- method: GET
path: /api/v1/decisions/{sha256}
operationId: decisionCheckV1
- method: GET
path: /api/v1/revocations
operationId: revocations
- method: GET
path: /api/v1/visitor
operationId: visitorResolveV1
- method: POST
path: /api/v1/visitor
operationId: visitorResolveBatchV1
- method: GET
path: /api/v1/mcp/scan
operationId: mcpScanUrl
- method: POST
path: /api/v1/mcp/lock/check
operationId: mcpLockCheck
list: https://crawlcheck.io/api/v1/core
description: 'Operations tagged Conformance across 2 of this provider''s published API definitions: crawlcheck-io-openapi.json, crawlcheck-io-openapi.yml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://crawlcheck.io
tags:
- name: Conformance
paths:
/conformance/index.json:
get:
operationId: conformanceIndex
summary: 'The conformance suite: real bundles and receipts of crawlcheck.io''s own scans…'
responses:
'200':
description: index of fixtures with expected outputs
content:
application/json:
examples:
worked:
summary: 'Captured from production on 2026-10-01 (MDT). 5 of the 19 fixtures shown. Run every one: curl -sO https://crawlcheck.io/conformance/run.mjs && node run.mjs'
value:
kind: crawlcheck-conformance
version: v1
built_at: '2026-10-01T14:39:35.511Z'
domain: crawlcheck.io
verifier:
url: https://crawlcheck.io/crawlcheck-verify.mjs?v=46206b177cc941e1
sha256: 46206b177cc941e18259fca734716b9f53c65641261c59891bc07189a2f7e402
runner: https://crawlcheck.io/conformance/run.mjs
bundle_checks:
- manifest_hash
- key_id
- signature
- subject_hash
- subject_binds
- merkle_path
- ots_commits_root
- ots_attestations
- experience_root
- decision_root
- lineage_root
receipt_checks:
- receipt_hash
- key_id
- signature
- key_published
- order
rule: a conforming verifier returns exactly the expected value (true / false / null) for every listed check and the expected overall verdict; null means the check cannot run and must say why, never pass
fixtures:
- name: valid-v3-anchored
group: valid
kind: bundle
what: 'A manifest-v3 bundle of a Bitcoin-anchored day, with the subject and every leaf: every check runs and passes.'
file: https://crawlcheck.io/conformance/valid-v3-anchored.json?sha=3cc62582b49cc4b9
sha256: 3cc62582b49cc4b97d462516b5193345bd08a0f1ba5e5deba3d349075d4b4905
bytes: 31867
expected:
verified: true
checks:
manifest_hash: true
key_id: true
signature: true
subject_hash: true
subject_binds: true
merkle_path: true
ots_commits_root: true
ots_attestations: true
experience_root: true
decision_root: true
lineage_root: true
published_kid: null
must_reject: null
- name: valid-v2-legacy
group: legacy
kind: bundle
what: 'A manifest-v2 bundle (before sealed roots, 2026-09-30): the three root checks cannot run and say why; nothing fails.'
file: https://crawlcheck.io/conformance/valid-v2-legacy.json?sha=ad9f5b3bfd4f7df8
sha256: ad9f5b3bfd4f7df808c370e3b96aebd9ca2f39d52c66ffa01ae7cb96f944d7ef
bytes: 25667
expected:
verified: true
checks:
manifest_hash: true
key_id: true
signature: true
subject_hash: true
subject_binds: true
merkle_path: true
ots_commits_root: true
ots_attestations: true
experience_root: null
decision_root: null
lineage_root: null
published_kid: null
must_reject: null
- name: valid-pre-manifest
group: legacy
kind: bundle
what: 'A record from before evidence manifests (2026-09-20): manifest, key and signature checks cannot run; the record digest still folds to its day''s root.'
file: https://crawlcheck.io/conformance/valid-pre-manifest.json?sha=7cae4d54c9a1a3b2
sha256: 7cae4d54c9a1a3b23c330e92d1c5c4fcebaed4766b76cbcbd581bb833f888eaa
bytes: 6032
expected:
verified: true
checks:
manifest_hash: null
key_id: null
signature: null
subject_hash: true
subject_binds: true
merkle_path: true
ots_commits_root: true
ots_attestations: true
experience_root: null
decision_root: null
lineage_root: null
published_kid: null
must_reject: null
- name: duplicated-experience-leaf
group: tampered
kind: bundle
what: The fetch whose leaf sorts last is listed twice. The Merkle root is IDENTICAL (an odd node pairs with itself), so only the leaf count can catch it; the body also no longer matches its signed digest.
file: https://crawlcheck.io/conformance/duplicated-experience-leaf.json?sha=753127a72b109cd7
sha256: 753127a72b109cd75fc9bfe69d0b248cc1a7ebd49dffcfdc785af7f61089820c
bytes: 32431
expected:
verified: false
checks:
manifest_hash: false
key_id: true
signature: true
subject_hash: true
subject_binds: true
merkle_path: true
ots_commits_root: true
ots_attestations: true
experience_root: false
decision_root: true
lineage_root: true
published_kid: null
must_reject: null
- name: receipt-foreign-key
group: receipt
kind: receipt
what: A doctored receipt re-signed with someone else's key. Every check a verifier can run offline passes; its key id is not the published one. A conforming CONSUMER must reject it by comparing key ids with the directory.
file: https://crawlcheck.io/conformance/receipt-foreign-key.json?sha=5bf2d5d403efda7e
sha256: 5bf2d5d403efda7ecbe7c636eb351d5eb7bb1472321c5901679db404d855d7bc
bytes: 4701
expected:
verified: true
checks:
receipt_hash: true
key_id: true
signature: true
key_published: null
order: true
published_kid: hcIAczGf-8EFBnkunmZlvFWnD2nHHeHeC9cM4BTiBVo
must_reject: the receipt's key id RBj_N824fPZv7FrIuMSNHFizOevhnUneNWoQNqz2pDs is not in https://crawlcheck.io/.well-known/http-message-signatures-directory
with_key_directory:
integrity_valid: true
issuer_trusted: false
accepted: false
accepted_strict: false
note: 'verified is the offline result and never permission; with the published key directory this receipt is accepted: false'
schema:
type:
- object
- 'null'
properties:
kind:
type:
- string
- 'null'
version:
type:
- string
- 'null'
built_at:
type:
- string
- 'null'
domain:
type:
- string
- 'null'
verifier:
type:
- object
- 'null'
properties:
url:
type:
- string
- 'null'
sha256:
type:
- string
- 'null'
additionalProperties: true
runner:
type:
- string
- 'null'
bundle_checks:
type:
- array
- 'null'
items:
type:
- string
- 'null'
receipt_checks:
type:
- array
- 'null'
items:
type:
- string
- 'null'
rule:
type:
- string
- 'null'
fixtures:
type:
- array
- 'null'
items:
type:
- object
- 'null'
properties:
name:
type:
- string
- 'null'
group:
type:
- string
- 'null'
kind:
type:
- string
- 'null'
what:
type:
- string
- 'null'
file:
type:
- string
- 'null'
sha256:
type:
- string
- 'null'
bytes:
type:
- number
- 'null'
expected:
type:
- object
- 'null'
properties:
verified:
type:
- boolean
- 'null'
checks:
type:
- object
- 'null'
properties:
manifest_hash:
type:
- boolean
- 'null'
key_id:
type:
- boolean
- 'null'
signature:
type:
- boolean
- 'null'
subject_hash:
type:
- boolean
- 'null'
subject_binds:
type:
- boolean
- 'null'
merkle_path:
type:
- boolean
- 'null'
ots_commits_root:
type:
- boolean
- 'null'
ots_attestations:
type:
- boolean
- 'null'
experience_root:
type:
- boolean
- 'null'
decision_root:
type:
- boolean
- 'null'
lineage_root:
type:
- boolean
- 'null'
receipt_hash:
type:
- boolean
- 'null'
key_published: {}
order:
type:
- boolean
- 'null'
additionalProperties: true
additionalProperties: true
published_kid:
type:
- string
- 'null'
must_reject:
type:
- string
- 'null'
with_key_directory:
type:
- object
- 'null'
properties:
integrity_valid:
type:
- boolean
- 'null'
issuer_trusted:
type:
- boolean
- 'null'
accepted:
type:
- boolean
- 'null'
accepted_strict:
type:
- boolean
- 'null'
additionalProperties: true
note:
type:
- string
- 'null'
additionalProperties: true
additionalProperties: true
x-schema-source: worked-example
x-codeSamples:
- lang: Shell
label: curl
source: curl -s 'https://crawlcheck.io/conformance/index.json'
security: []
x-auth: public; no credential read
tags:
- Conformance
servers:
- url: https://crawlcheck.io
components:
securitySchemes:
licenceKey:
type: apiKey
in: header
name: x-crawlcheck-key
description: 'Your licence key: cc_ followed by 32 hex characters. Sent on every keyed call.'
bearer:
type: http
scheme: bearer
description: The same licence key as a Bearer token. Accepted on /api/v1/* and /api/usage.
externalDocs:
url: https://crawlcheck.io/docs/api
description: Human-readable reference
x-refined-from:
- crawlcheck-io-openapi.json
- crawlcheck-io-openapi.yml