Claim or manage your service

Claim your host to get the provider-verified mark, a public contact and a removal guarantee. Verification never changes the trust score. Already claimed? Jump straight to your management page below.

Your listings

Hosts you claimed or managed in this browser:

Manage your domain

Open the status and management page for a host you claimed: continue a pending verification, resend the confirmation email, update the profile or run signed actions.

Claim a new domain

How verification works

Domain proof: you place x402-trust-verification=v1:<your public key> in https://<your host>/.well-known/x402-trust.txt. The public key is safe to publish; only your private key can authorize actions (removal, email changes). We re-check the file regularly and remove the badge if it disappears for more than a week.

Removal guarantee: verified hosts can request removal either with a signed action or by putting x402-trust-remove in the same file. Both remove every endpoint of the host from the public catalog, delete the stored contact data, and blocklist the host so no automated discovery re-adds it.

Host or endpoint URL *

The host that serves your x402 endpoints (any one endpoint URL works too, we take the host from it).

Contact email *

We send a confirmation link first; only after you click it is this address published. It appears as the provider contact on your provider and endpoint pages and in the trust API.

Optional profile details (published after verification)

Organization name Support URL Documentation URL Business address / imprint (optional, for companies) Short description in your own words

Public key *

Using your own key? openssl genpkey -algorithm EC -pkeyopt ec_paramgen_curve:P-256 -out provider-key.pem, then get the public key with openssl pkey -in provider-key.pem -pubout and paste the public key here. Keep provider-key.pem safe: for later signed actions you simply select this key file in the browser, and it is never uploaded.

I am authorized to act for this host. I consent to the publication of the email address and the optional profile details above on x402-trust.com (provider/endpoint pages) and in the x402 Trust API as the provider contact, until I withdraw it. I can withdraw at any time through the remove flow, which deletes the claim and blocks the host from automated discovery. Email me when my endpoints start failing their x402 probes (provider alerts). Optional, separate from the publication consent, can be turned off any time.