# imgauth — API di attestazione opere digitali

**Canonical:** https://apis.io/providers/imgauth-api-di-attestazione-opere-digitali/  
**Website:** https://attestazione.spaziogenesi.org/en/developer/  
**APIs profiled:** 2

Digital-work attestation and proof-of-existence service operated by Spazio Genesi ETS, an Italian non-profit (third-sector entity). The client computes a SHA-256 fingerprint locally and sends only the 64-hex hash — file bytes never leave the device. The service binds that fingerprint to a signed server-side timestamp (HMAC), issues a PAdES B-LT signed PDF certificate carrying an RFC 3161 timestamp from an Adobe AATL-recognised TSA, and anchors the fingerprint in Bitcoin through OpenTimestamps across four independent calendars. Verification is free and unlimited for anyone, and the proof of existence never expires. Exposes an 18-operation public REST API (OpenAPI 3.0.3, served at the API host root), a hosted zero-install remote MCP server whose eight tools answer tools/list anonymously, an sg-attest CLI, a GitHub Action, embeddable SVG badges and three CORS-open public status endpoints. The API contract is in Italian by design. Positioned explicitly as a NON-QUALIFIED attestation under eIDAS 2.0.

## Kin Score — 65.7 / 100 (strong)

Scored 2026-08-17 under rubric 0.11.0. Trend: flat (+0.0 from 65.7).

| Facet | Score |
|---|---|
| Discoverability | 75.9 |
| Contract Quality | 52.0 |
| Governance | 20.8 |
| Operational Transparency | 78.9 |
| Developer Ergonomics | 69.6 |
| Commercial Clarity | 92.1 |

## Agent readiness — 45.9 (agent-ready)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | no |
| MCP Server | no |
| Auth Clarity | yes |
| Idempotency | no |
| Error Semantics | verified |
| OpenAPI Examples | partial |
| Rate Limit Signal | documented |
| Event Surface Described | no |
| Agent Skills | yes |
| Well Known Catalog | no |
| Consent Identity | yes |
| Agent Card | no |
| Dry Run Mode | no |

## APIs (2)

- **imgauth REST API** — Attestation/proof-of-existence REST API. Client-side SHA-256 hashing, signed PDF certificates, RFC 3161 timestamps, OpenTimestamps/Bitcoin anchoring, verifiable certificate page...
- **imgauth Remote MCP Server** — Hosted, zero-install MCP server (Streamable HTTP, protocol 2025-06-18) exposing the attestation service to MCP-capable agents. The eight tools were read live from tools/list on ...

## MCP servers (2)

- **mcp**
- **imgauth-api-di-attestazione-opere-digitali-mcp.yml**

## Security (4)

- **Imgauth Api Di Attestazione Opere Digitali Authentication** — apiKey/http · 2 schemes
- **Imgauth Api Di Attestazione Opere Digitali Domain Security** — TLSv1.3 · DNSSEC · DMARC
- **Imgauth Api Di Attestazione Opere Digitali Vulnerability Disclosure** — Hackerone · security.txt · contact published
- **Imgauth Api Di Attestazione Opere Digitali Trust Center** — trust center published

## Plans (1)

- **Imgauth Api Di Attestazione Opere Digitali Plans Pricing**

## Tags

digital notarization, timestamping, proof-of-existence, content authenticity, provenance, copyright, IP protection, blockchain, Bitcoin, OpenTimestamps, security, document, e-signature, MCP

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/imgauth-api-di-attestazione-opere-digitali/). Scores are computed from the provider's own public artifacts under a published rubric.