Verification for agentpay.tools

✓ 1. Claim ✓ 2. Email confirmed ✓ 3. Domain file seen ✓ 4. Verified
✓Publish the verification file▾
Create /.well-known/x402-trust.txt on agentpay.tools with exactly this content:
last successful file check 2026-11-06 00:20 UTC
✓Confirm your email▾
Status: confirmed (romudille@gmail.com). The address is published as the provider contact while the verification is active.

Your public profile

Organization: AgentPay
Support: https://github.com/romudille-bit/agentpay/issues
Docs: https://agentpay.tools/guides
Description: Buyer-side trust layer for x402 agents: verified_route ranks providers on paid delivery evidence and sybil-collapsed payer counts; pre_trade_check returns an ok/caution/avoid verdict before a trade; session_create enforces a hard USDC budget cap with chain-verified receipts on a public ledger. USDC on Base and Stellar, sBTC on Stacks.
Provider alerts: enabled
Endpoints covered by this host: /v1/session/create, /tools/pre_trade_check/call, /tools/verified_route/call, /mcp, /tools/funding_spread/call, /tools/sbtc_peg/call

Actions (signed)

Every action is authorized with your private key; the server issues a one-shot challenge each time. Removal additionally re-checks the file on your domain, so a stolen key alone cannot remove a listing.
To run an action: open it below, choose your key file (or paste the key), click the action button, done. The key is read and used only in your browser and never leaves it; no command line needed.
Change contact email
The JSON key file from the claim page or a PKCS8 PEM works. The file is read locally in your browser and never uploaded.
Expert fallback: sign with openssl on the command line
Not needed for the normal flow above. Press "Get signing challenge" to see the exact message to sign (the nonce is part of it), sign it with printf '%s' '<message>' | openssl dgst -sha256 -sign provider-key.pem | base64 -w0, then send action, nonce and signature plus the action fields to this form's URL, for example with curl.
Update profile
The JSON key file from the claim page or a PKCS8 PEM works. The file is read locally in your browser and never uploaded.
Expert fallback: sign with openssl on the command line
Not needed for the normal flow above. Press "Get signing challenge" to see the exact message to sign (the nonce is part of it), sign it with printf '%s' '<message>' | openssl dgst -sha256 -sign provider-key.pem | base64 -w0, then send action, nonce and signature plus the action fields to this form's URL, for example with curl.
Provider alerts (email on failures)
Per endpoint. Checked endpoints mail you when they start failing their probes. Delisted endpoints start unchecked: they stay quiet by default, checking one opts it back in.
The JSON key file from the claim page or a PKCS8 PEM works. The file is read locally in your browser and never uploaded.
Expert fallback: sign with openssl on the command line
Not needed for the normal flow above. Press "Get signing challenge" to see the exact message to sign (the nonce is part of it), sign it with printf '%s' '<message>' | openssl dgst -sha256 -sign provider-key.pem | base64 -w0, then send action, nonce and signature plus the action fields to this form's URL, for example with curl.
Remove or restore endpoints
Remove selected endpoints. A removed endpoint leaves the public catalog (pages and badges answer 410), probing and alert mails for it stop, and discovery will not re-add it. Probe/settlement history stays internally as anonymous time series.
The JSON key file from the claim page or a PKCS8 PEM works. The file is read locally in your browser and never uploaded.
Expert fallback: sign with openssl on the command line
Not needed for the normal flow above. Press "Get signing challenge" to see the exact message to sign (the nonce is part of it), sign it with printf '%s' '<message>' | openssl dgst -sha256 -sign provider-key.pem | base64 -w0, then send action, nonce and signature plus the action fields to this form's URL, for example with curl.
Remove this host from the catalog
This removes every endpoint of agentpay.tools from the public catalog (pages return 410), deletes the stored contact data, and blocklists the host: automated discovery will never add it again. Probe/settlement history stays internally as anonymous time series. As a fallback without your key, put x402-trust-remove into the verification file instead.
The JSON key file from the claim page or a PKCS8 PEM works. The file is read locally in your browser and never uploaded.
Expert fallback: sign with openssl on the command line
Not needed for the normal flow above. Press "Get signing challenge" to see the exact message to sign (the nonce is part of it), sign it with printf '%s' '<message>' | openssl dgst -sha256 -sign provider-key.pem | base64 -w0, then send action, nonce and signature plus the action fields to this form's URL, for example with curl.

Lost your key or need to change everything?

A full rotation replaces the provider key, the contact address and the profile of this claim in one go; the one-shot rotation link goes to the contact address on file for this claim.