> ## Documentation Index
> Fetch the complete documentation index at: https://docs.getsly.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Verify Web Bot Auth signature

> Verify an agent's Web Bot Auth on a card transaction. Sly checks the signature against the agent's Ed25519 public key, validates the transaction intent, and returns a network_ref usable as authorization for the card txn.



## OpenAPI

````yaml /api-reference/openapi.json post /v1/cards/verify
openapi: 3.1.0
info:
  title: Sly API
  description: >-
    The Agentic Economy Platform — stablecoin payments, agent wallets,
    multi-protocol commerce, and AI agent orchestration.
  version: 1.0.0
  contact:
    name: Sly
    url: https://getsly.ai
    email: support@getsly.ai
servers:
  - url: https://api.getsly.ai/v1
    description: Production
  - url: https://sandbox.getsly.ai/v1
    description: Sandbox
security:
  - bearerAuth: []
paths:
  /v1/cards/verify:
    post:
      tags:
        - Cards
      summary: Verify Web Bot Auth signature
      description: >-
        Verify an agent's Web Bot Auth on a card transaction. Sly checks the
        signature against the agent's Ed25519 public key, validates the
        transaction intent, and returns a network_ref usable as authorization
        for the card txn.
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CardVerifyRequest'
      responses:
        '200':
          description: Verification result
          content:
            application/json:
              schema:
                type: object
                properties:
                  data:
                    $ref: '#/components/schemas/CardVerifyResponse'
                required:
                  - data
        '400':
          description: Validation error or signature mismatch
          content:
            application/json:
              schema:
                allOf:
                  - $ref: '#/components/schemas/Error'
                  - properties:
                      error:
                        type: string
                      code:
                        type: string
                      details: {}
      security:
        - bearerAuth: []
components:
  schemas:
    CardVerifyRequest:
      type: object
      properties:
        network:
          type: string
          enum:
            - visa
            - mastercard
        agent_id:
          type: string
          format: uuid
        transaction_intent:
          type: object
          properties:
            merchant_id:
              type: string
            amount:
              type: string
            currency:
              type: string
            description:
              type: string
          required:
            - merchant_id
            - amount
            - currency
        signed_bot_identity:
          type: string
          description: JWS — signed by the agent's Ed25519 key
      required:
        - network
        - agent_id
        - transaction_intent
        - signed_bot_identity
    CardVerifyResponse:
      type: object
      properties:
        verified:
          type: boolean
        network_ref:
          type:
            - string
            - 'null'
          description: Authorization token to use on the card transaction
        network:
          type: string
          enum:
            - visa
            - mastercard
        expires_at:
          type:
            - string
            - 'null'
          format: date-time
        rejection_reason:
          type:
            - string
            - 'null'
      required:
        - verified
        - network
    Error:
      type: object
      properties:
        error:
          type: string
        code:
          type: string
        details: {}
        request_id:
          type: string
      required:
        - error
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      description: >-
        API key (pk_test_* or pk_live_*), JWT session, agent token (agent_*),
        Ed25519 session (sess_*), or portal token (portal_*).

````