WritersLogic Verifiable AI Agent Hub Attestation API
Hardware-bound attestation: nonce generation, device enrollment, and evidence submission
Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/writerslogic-com:writerslogic-com-attestation-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
OpenAPI Specification
openapi: 3.2.0
info:
title: WritersProof Attestation API
version: 1.0.0
description: Certificate Authority and verification API for the Proof-of-Effort protocol. Certify, verify, and prove human authorship.
contact:
name: WritersLogic LLC
url: https://writersproof.com
license:
name: SSPL-1.0
url: https://www.mongodb.com/licensing/server-side-public-license
servers:
- url: https://api.writersproof.com
description: Production
- url: https://api.writerslogic.com
description: Legacy
tags:
- name: Attestation
description: 'Hardware-bound attestation: nonce generation, device enrollment, and evidence submission'
paths:
/v1/nonce:
post:
tags:
- Attestation
operationId: requestNonce
summary: Request attestation nonce
description: Generate a cryptographic nonce for hardware-bound attestation. The nonce expires after 300 seconds.
security:
- bearerAuth: []
requestBody:
required: true
content:
application/json:
schema:
type: object
required:
- hardwareKeyId
properties:
hardwareKeyId:
type: string
format: uuid
responses:
'200':
description: Nonce issued
content:
application/json:
schema:
type: object
properties:
nonce:
type: string
description: 64-char hex nonce
expiresAt:
type: string
format: date-time
nonceId:
type: string
format: uuid
'400':
$ref: '#/components/responses/ValidationError'
'401':
$ref: '#/components/responses/Unauthorized'
'404':
description: Hardware key not found or not active
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
/v1/enroll:
post:
tags:
- Attestation
operationId: enrollDevice
summary: Enroll hardware key
description: Register or re-enroll a device's hardware-bound signing key. The deviceId must equal SHA-256(publicKey). Assurance tier is determined by attestation type.
security:
- bearerAuth: []
requestBody:
required: true
content:
application/json:
schema:
$ref: '#/components/schemas/EnrollRequest'
responses:
'200':
description: Device enrolled
content:
application/json:
schema:
type: object
properties:
hardwareKeyId:
type: string
format: uuid
assuranceTier:
type: string
enum:
- T1
- T2
- T3
enrolled:
type: boolean
example: true
'400':
$ref: '#/components/responses/ValidationError'
'401':
$ref: '#/components/responses/Unauthorized'
/v1/identity:
post:
tags:
- Attestation
operationId: putIdentityEscrow
summary: Escrow encrypted author-identity seed
description: Upload (upsert) the current user's end-to-end-encrypted author-identity seed. The body's `ciphertext` is a JWE Compact string (RFC 7516; PBES2-HS512+A256KW / A256GCM) produced client-side under a user-supplied recovery passphrase. The server only ever stores ciphertext; it cannot recover the identity.
security:
- bearerAuth: []
requestBody:
required: true
content:
application/json:
schema:
type: object
required:
- ciphertext
properties:
ciphertext:
type: string
description: JWE Compact Serialization (five base64url segments).
wrap_alg:
type: string
example: PBES2-HS512+A256KW
kdf_params:
type: object
nullable: true
public_key:
type: string
nullable: true
key_version:
type: integer
example: 1
responses:
'200':
description: Identity escrowed
content:
application/json:
schema:
type: object
properties:
escrowed:
type: boolean
example: true
updated:
type: boolean
example: false
'400':
$ref: '#/components/responses/ValidationError'
'401':
$ref: '#/components/responses/Unauthorized'
get:
tags:
- Attestation
operationId: getIdentityEscrow
summary: Fetch encrypted author-identity seed
description: 'Return the current user''s escrowed JWE blob for client-side decryption. Returns 404 with header `X-WP-Identity: none` when the endpoint exists but the user has no escrow yet.'
security:
- bearerAuth: []
responses:
'200':
description: Escrowed identity blob
content:
application/json:
schema:
type: object
properties:
ciphertext:
type: string
wrap_alg:
type: string
kdf_params:
type: object
nullable: true
public_key:
type: string
nullable: true
key_version:
type: integer
created_at:
type: string
format: date-time
'401':
$ref: '#/components/responses/Unauthorized'
'404':
description: No escrowed identity for this account
components:
responses:
Unauthorized:
description: Authentication required
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
ValidationError:
description: Request validation failed
content:
application/json:
schema:
type: object
properties:
error:
type: string
example: Validation failed
details:
type: array
items:
type: string
schemas:
Error:
type: object
properties:
error:
type: string
required:
- error
EnrollRequest:
type: object
required:
- deviceId
- publicKey
- platform
- attestationType
- proofDeviceId
properties:
deviceId:
type: string
pattern: ^[a-f0-9]{32}$
description: SHA-256(publicKey), first 16 bytes, lowercase hex
publicKey:
type: string
pattern: ^[a-f0-9]{64}$|^[a-f0-9]{130}$
platform:
type: string
enum:
- macos
- windows
- linux
attestationType:
type: string
enum:
- secure_enclave
- tpm
- software
attestationCertificate:
type: string
maxLength: 8192
attestationData:
type: string
maxLength: 8192
proofDeviceId:
type: string
pattern: ^[a-f0-9]{128}$
description: Ed25519 signature over DST("witnessd-enroll-v1") || deviceId bytes, proving possession of the private key being enrolled
requestCertificate:
type: boolean
securitySchemes:
bearerAuth:
type: http
scheme: bearer
bearerFormat: JWT
description: Supabase JWT token
apiKeyAuth:
type: apiKey
in: header
name: X-API-Key
description: API key with wp_sk_ prefix