MandateShield Proof Network API

The Proof Network API from MandateShield — 5 operation(s) for proof network.

Documentation GitHub OpenAPI

Operations 5

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

OPTIONS /api/v1/proof-network/challenges Check CORS for proof network challenges · Inspect CORS support #

Ask an LLM

“Can a browser create proof network challenges from another origin?”

“What CORS preflight response does the proof-network challenges endpoint return?”

Tell an agent

Send a CORS preflight to the proof network challenges endpoint.

Check cross-origin support for creating subject-binding challenges.

OPTIONS /api/v1/proof-network/attestations Check CORS for proof network attestations · Inspect CORS support #

Ask an LLM

“Is the proof network attestations endpoint callable cross-origin?”

“What CORS headers does the attestation issuance endpoint return on preflight?”

Tell an agent

Send a CORS preflight to the proof network attestations endpoint.

Check cross-origin support for issuing self-report attestations.

OPTIONS /api/v1/proof-network/proofs Check CORS for the proof list · Inspect CORS support #

Ask an LLM

“Can a web page list proof network proofs cross-origin?”

“What CORS preflight response does the proof-network proofs list give?”

Tell an agent

Send a CORS preflight to the proof network proofs list.

Check cross-origin support for listing self-report proofs.

OPTIONS /api/v1/proof-network/proofs/{proofId} Check CORS for one proof network proof · Inspect CORS support #

Ask an LLM

“Can I fetch a single proof-network proof from a browser on another domain?”

“What CORS preflight response does one proof network record return?”

Tell an agent

Send a CORS preflight for a single proof network proof.

Check cross-origin access for reading one self-report proof by ID.

OPTIONS /api/v1/proof-network/proofs/{proofId}/badge.svg Check CORS for a proof network badge · Inspect CORS support #

Ask an LLM

“Can other websites load a proof network self-report badge cross-origin?”

“Which CORS headers come back on preflight for a proof-network badge?”

Tell an agent

Send a CORS preflight to a proof network badge endpoint.

Check cross-origin support for embedding self-report proof badges.

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/mandateshield-com:mandateshield-com-proof-network-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: MandateShield Payment Authority Proof Network API
  version: 3.4.0
  description: Fail-closed authority verification, provider-bound execution permits and provider-outcome reconciliation that is caller-report-independent for autonomous AI-agent purchases.
  termsOfService: https://mandateshield.com/terms
  contact:
    name: Gökhan Vodinali · MandateShield operator
    url: https://mandateshield.com/legal
    email: support@hemelion.com
servers:
- url: https://mandateshield.com
tags:
- name: Proof Network
paths:
  /api/v1/proof-network/challenges:
    options:
      operationId: publicProofChallengeOptions
      summary: Inspect CORS support
      responses:
        '204':
          description: CORS pre-flight accepted
      tags:
      - Proof Network
  /api/v1/proof-network/attestations:
    options:
      operationId: publicProofAttestationOptions
      summary: Inspect CORS support
      responses:
        '204':
          description: CORS pre-flight accepted
      tags:
      - Proof Network
  /api/v1/proof-network/proofs:
    options:
      operationId: publicProofListOptions
      summary: Inspect CORS support
      responses:
        '204':
          description: CORS pre-flight accepted
      tags:
      - Proof Network
  /api/v1/proof-network/proofs/{proofId}:
    options:
      operationId: publicProofGetOptions
      summary: Inspect CORS support
      responses:
        '204':
          description: CORS pre-flight accepted
      tags:
      - Proof Network
  /api/v1/proof-network/proofs/{proofId}/badge.svg:
    options:
      operationId: publicProofBadgeOptions
      summary: Inspect CORS support
      responses:
        '204':
          description: CORS pre-flight accepted
      tags:
      - Proof Network
components:
  securitySchemes:
    hostingSession:
      type: apiKey
      in: header
      name: OAI-Authenticated-User-Email
      description: Hosting-injected authenticated account-owner identity. The hosting boundary validates the user session and injects this assertion; callers cannot authenticate by supplying this header directly. State-changing control-plane requests additionally require the trusted same-origin check documented by the operation.
    bearerAuth:
      type: http
      scheme: bearer
      bearerFormat: ms_test_… or ms_live_…
      description: Keep API keys server-side and isolate them by purpose. VERIFY keys can issue challenges and strict decisions. Paid live PROCESSOR keys are bound to one processor_audience and can call only the execution-transition boundary.
x-mandateshield-release:
  product_version: 1.13.0
  openapi_version: 3.4.0
  standard_version: 2.4.0
  released_at: '2026-07-28T14:25:22.000Z'
  generated_at: '2026-07-28T14:25:22.000Z'
  status: current
  latest_pointer: https://mandateshield.com/current-release.json
  superseded_by: null
  canonical_versioned_documents:
    openapi: https://mandateshield.com/openapi/3.4.0.json
    llms: https://mandateshield.com/llms/1.13.0.txt
    llms_full: https://mandateshield.com/llms-full/1.13.0.txt
    discovery: https://mandateshield.com/discovery/1.13.0.json
x-provenance:
  method: harvested
  publisher: MandateShield
  source: https://mandateshield.com/openapi.json
  note: split by refine-openapis from the provider's own published document, verified by fetch (openapi/_original/*.fetch.json);
    stamped by stamp-openapi-provenance.py (roadmap#793)

MandateShield Proof Network API

Operations 5

Documentation

Specifications

Schemas & Data

Other Resources

Work with this as data

MCP server

Tools for apis

Call it yourself

Get an API key

OpenAPI Specification