{"kind":"crawlcheck-core-contract","v":1,"promise":"These operations are the core contract. They stay at /api/v1 and keep answering for at least 180 days after any /api/v2 is announced; their stable fields change only in a new major version, and their provisional fields only after 30 days' notice, per /docs/api/compatibility. Verifying what they return needs no call: the published keys at /.well-known/http-message-signatures-directory and crawlcheck-verify.mjs. Everything else documented here is useful but secondary, and may change with the notice its fields' tags promise.","operations":[{"group":"ask","method":"GET","path":"/api/v1/resolve","operationId":"resolveDomainV1","what":"one signed answer about a domain: what it permits, serves and declares, and a decision per action"},{"group":"ask","method":"POST","path":"/api/v1/resolve","operationId":"resolveBatchV1","what":"the same for 1-100 domains"},{"group":"decide","method":"POST","path":"/api/v1/preflight","operationId":"preflightV1","what":"a signed decision for one action, with a receipt to keep"},{"group":"receipt","method":"GET","path":"/api/v1/decisions/{sha256}","operationId":"decisionCheckV1","what":"for a site: check the receipt an agent presents in the CrawlCheck-Receipt header"},{"group":"revocation","method":"GET","path":"/api/v1/revocations","operationId":"revocations","what":"the signed list of domains whose connect and transact decisions are revoked now"},{"group":"visitor","method":"GET","path":"/api/v1/visitor","operationId":"visitorResolveV1","what":"for a site: is this request really from the agent it names"},{"group":"visitor","method":"POST","path":"/api/v1/visitor","operationId":"visitorResolveBatchV1","what":"the same for 1-100 requests"},{"group":"mcp","method":"GET","path":"/api/v1/mcp/scan","operationId":"mcpScanUrl","what":"before connecting: the tools a remote MCP server lists, scanned for poisoning"},{"group":"mcp","method":"POST","path":"/api/v1/mcp/lock/check","operationId":"mcpLockCheck","what":"before each session: compare a server's tools with the lockfile you kept"}],"verify":{"keys":"https://crawlcheck.io/.well-known/http-message-signatures-directory","verifier":"https://crawlcheck.io/crawlcheck-verify.mjs"},"openapi":"https://crawlcheck.io/openapi.json","compatibility":"https://crawlcheck.io/docs/api/compatibility"}