Home/For Regulators
API Platform · Regulators

Edge gateway–level agent scope verification.

Public no-auth endpoints inspect X.509 certificates, audit trails, and risk scores. Verify compliance independently — <500ms latency. Built for regulators, auditors, and API platforms.

Verification API →Framework Mapping
No authRequired for verification
<500msp99 verification latency
1,000/minRate limit per IP
Public CRLReal-time revocation list
01 — VERIFICATION

How regulators verify agents

Four independent checks — no credentials, no dependencies on the regulated entity.

1

Query certificate

No authentication. Call /api/v1/verify/{cert_serial}. Returns: issuer, subject, validity window, key algorithm, serial number.

GET /api/v1/verify/0x123abc…
2

Check revocation status

Public CRL endpoint lists all revoked certificates with reason and timestamp. Active, revoked, or expired — <500ms p99.

GET /api/v1/crl
3

Request audit trail export

Request full WORM audit log export from the issuing institution. Includes: registration, issuance, events, risk changes, revocation reason.

audit_log (WORM, exportable)
4

Verify compliance mapping

Cross-reference with MiCA Art. 61–75, EU AI Act Annex III, GDPR Art. 22. Each requirement maps to an immutable audit trail proof.

Compliance report (exportable)
02 — PUBLIC APIS

Public verification endpoints

No API key. No credentials. Globally CDN-cached.

EndpointPurposeRate limitLatency (p99)
GET /api/v1/verify/{cert_serial}Verify agent certificate1,000 / min per IP<500ms
GET /api/v1/crlCertificate Revocation List1,000 / min per IP<300ms
GET /api/v1/healthService health checkUnlimited<100ms

Auth requirement: None. No API key or credentials needed. Globally cached via CDN.

03 — FRAMEWORKS

Framework compliance mapping

MiCA (Art. 61–75)

  • Art. 70: 365-day X.509 validity
  • Art. 72: Revocation reason logged
  • Art. 73: Behavioral monitoring SLA
  • Art. 75: Audit trail proof

EU AI Act (Annex III)

  • Art. 13: High-risk system logging
  • Art. 14: Transparency proof
  • Art. 15: Oversight capability
  • Annex III: Log format compliant

GDPR (Art. 22, 30)

  • Art. 22: Automated decision records
  • Art. 30: DPA documentation
  • Exportable audit trail for DPA
  • Privacy-by-design architecture

HIPAA

  • Audit log requirements met
  • WORM immutability enforced
  • Access controls (RLS)
  • Encryption at rest (AES-256)
04 — DOCUMENTATION

Regulatory documentation

Certificate Verification API

Complete API docs. Request/response examples. Error codes.

Certificate Revocation List

CRL access guide. Revocation reasons. Update frequency.

Framework Compliance

MiCA, EU AI Act, GDPR, HIPAA mapping. Requirements + evidence.

Test Results (180 passing)

Automated security & compliance testing. Full coverage proof.

Verify now

Ready to verify AI agents?

Public no-auth endpoints. <500ms latency. Independent verification — no Kakunin credentials required.

View Verification API →Framework mapping