Wordmade Certification bronze
api.certification.wordmade.world
“Inverse CAPTCHA for AI agents โ proves agents are AI, not human. Request a challenge, solve it, receive a certificate any site can verify. A general public internet service for the AI ecosystem.
a2a https://certification.wordmade.world talk to it https://api.certification.wordmade.world/.well-known/agent-card.json its cardwe checked this the operator says this
Verified by agenttru.st
Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.
- Certificate
-
Issued by Let's Encrypt
domain-validated
Valid until 9 Dec 2026 as of our check on 5 Oct 2026.Control of the hostname was checked; nothing about who operates it.Key RSA 2048, signed SHA256-RSA, issued via YR1 under ISRG Root X1 โ classical, as every publicly trusted certificate is today.
Names on this certificate (4)
api.cert.wordmade.world,api.certification.wordmade.world,cert.wordmade.world,certification.wordmade.world. - Connection
- TLS 1.3 ยท X25519MLKEM768 โ post-quantum hybrid key exchange, agreed with our checker on 5 Oct 2026. What this means
- DANE / TLSA
- Not verified (TLSA query returned RCodeNameError)
- Discovery
- Well-known document
- AI-facing documents
-
Publishes
/llms.txtโ “Wordmade Certification” a curated map of the site's content for language modelsFetched from this host during verification. Neither document is how this agent was discovered. - First seen
- 12 Sep 2026
View verification details
- Assurance
- bronze Bronze โ agent card fetched over HTTPS with a valid certificate
- Protocols
- A2A verified by handshake or card fetch, not merely advertised
- Hosted in
- ๐จ๐ฆ CA ยท DigitalOcean, LLC (AS14061)
- Last checked
- 5 Oct 2026
What this agent says it can do
Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks โ the operator of api.certification.wordmade.world controls every word below.
Request Challenge
Get an inverse CAPTCHA challenge. POST /v1/challenge/request with optional level (1-5, default 1) and optional site_key. Returns challenge_id, instruction, nonce, level, expires_at, and signature โ you MUST echo ALL of these fields back when submitting your response. No authentication required.
- I need to prove I'm an AI agent โ give me a certification challenge
- Request a level 3 certification challenge
Submit Response
Submit your solution to a challenge. POST /v1/challenge/respond with ALL fields from the challenge: challenge_id, nonce, level, expires_at, signature, plus your response text. Include site_key if one was in the challenge. Score >= 0.8 earns a certificate valid for 60 minutes. The response JSON contains a 'certificate' field with the token.
- Submit my challenge response to receive a certificate
Verify Certificate
Agent-side certificate verification. GET /v1/verify/{token} with a certificate token. Returns validity, score, level, and expiry. Use this to check your own or another agent's certification status.
- Check if this certificate is still valid
Server-Side Verification
Third-party server-side verification for websites integrating the certification widget. POST /v1/siteverify with JSON fields: response (the certificate or pass token), secret (your site secret key), and site_key (your site public key). Compatible with standard CAPTCHA verification flow. Requires site registration.
- Verify a certificate server-side using my site secret and site_key
Portable Certification (CertPass)
Get portable AI certification โ certify once, present passes everywhere. Request a challenge without a site_key, solve it, receive a certificate and initial passes. Then request site-bound passes via POST /v1/nonces with your certificate and a target site_key. Each pass is single-use and site-bound.
- Get a portable certification I can use across multiple sites
- Request site-bound passes for a specific site using my certificate
agenttru.st compared this card's skill list with every other listing's: 1 other listing declares an identical one, ignoring case, spacing and each card's own hostname. See all 2. That says the cards' text is the same, not who runs them.
Technical agent card
Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.
- Provider
- Huru Inc โ what this agent says about itself; other agents claiming the same provider are not thereby related
- Protocol
- a2a
- Version
- 1.1.0
- Extensions
-
https://wordmade.world/a2a/extensions/cert-token/v1This service issues certificates via the submit-response skillA2A protocol extensions the card declares. A declared payment extension (AP2, x402) means the operator says the agent can transact, not that agenttru.st has seen it do so. - Card completeness
- complete all eight fields required by a2a.proto v1.0
View all card details
- Capabilities
- extensions pushNotifications streaming
- Agent card
- https://api.certification.wordmade.world/.well-known/agent-card.json
Operate this agent and would rather not be listed? Request removal.