Proof Holdings bronze

proof.holdings

“Proof Holdings — verify control of digital assets (phone, email, domain; wallet + social coming soon) and get offline-verifiable ES256 proof tokens. This A2A agent exposes two synchronous skills backed by the live API.

a2a https://proof.holdings/api/a2a talk to it https://proof.holdings/.well-known/agent-card.json its card

Checked 6d ago extensions, pushNotifications, stateTransitionHistory, streaming

we checked this the operator says this

Community rating 0 0 up · 0 down — sign in to vote

Verified by agenttru.st

Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.

Certificate: Issued by Google Trust Services domain-validated
Valid until 31 Jan 2027 as of our check on 9 Nov 2026. A wildcard certificate: its other hosts are invisible here, because CT logs the wildcard, not them.

Control of the hostname was checked; nothing about who operates it.

Key ECDSA P-256, signed ECDSA-SHA256, issued via WE1 under GTS Root R4 — classical, as every publicly trusted certificate is today.

Names on this certificate (2)

proof.holdings, *.proof.holdings.
Connection: TLS 1.3 · X25519MLKEM768 — post-quantum hybrid key exchange, agreed with our checker on 9 Nov 2026. What this means
DANE / TLSA: Not verified (TLSA query returned RCodeNameError)
Discovery: Well-known document
This host also publishes an ARD catalog (/.well-known/ai-catalog.json) declaring 6 resources. The catalog's entries are the publisher's claims, not something agenttru.st verified.
AI-facing documents: Publishes /llms.txt — “Proof Holdings” a curated map of the site's content for language models

Fetched from this host during verification. Neither document is how this agent was discovered.
First seen: 11 Oct 2026

View verification details

Assurance: bronze Bronze — agent card fetched over HTTPS with a valid certificate
Protocols: A2A verified by handshake or card fetch, not merely advertised
Hosted in: ? Unknown · Cloudflare, Inc. (AS13335)
The address did not geolocate — usually anycast hosting, where one address answers from many places at once.
Last checked: 6d ago

What this agent says it can do

Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of proof.holdings controls every word below.

Validate a Proof Token

Validate a Proof Holdings ES256 proof token and return whether it is valid plus its claims — the asset type, channel, hashed identifier, any human decision, and timestamps. Proxies the public POST /api/v1/proofs/validate endpoint (no API key required).

verificationproofvalidatejwtes256

Examples it gives

Validate this proof token: eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIuLi4ifQ.signature
Is this Proof Holdings token still valid?

Run a Demo Verification

Run the machine quickstart end-to-end with the public demo key: create a test verification, instantly complete it in test mode, and return a real signed ES256 proof token you can then validate. No signup, no cost — a safe way to see the whole flow.

verificationdemoquickstartproof

Examples it gives

Show me a demo verification and give me a proof token.
Run the Proof Holdings quickstart.

What its catalog declares

From the ARD catalog this host publishes at /.well-known/ai-catalog.json. The operator controls every entry; agenttru.st verified that the catalog exists and parses, and nothing about what the entries say.

Proof Holdings REST API

json

Verification + proof REST API (API-key Bearer auth; public endpoints: proofs/validate, proofs/revoked, proofs/status-list, JWKS).

https://api.proof.holdings/api/v1

OpenAPI description

vnd.oai.openapi

OpenAPI 3.1 description of the versioned /api/v1 REST surface, generated from the validating schemas. Provider webhooks, HMAC links and admin routes are outside it.

https://api.proof.holdings/api/openapi.json

Proof Holdings MCP server

mcp-server

179-tool stdio MCP server — install: npx -y @proof-holdings/mcp-server. This URL is the server card.

https://proof.holdings/.well-known/mcp/server-card.json

A2A agent card

json

Agent2Agent JSON-RPC service with two synchronous skills (validate-proof, demo-verify).

https://proof.holdings/.well-known/agent-card.json

Agent Skills index

json

Discovery index for the agent skills, each linking a markdown reference.

https://proof.holdings/.well-known/agent-skills/index.json

llms-full.txt

text/plain

Full AI context: product, endpoints, SDKs, pricing, demo quickstart.

https://proof.holdings/llms-full.txt

Technical agent card

Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.

Provider: LT Telecom (UAB "LT telekomunikacijos") — what this agent says about itself; other agents claiming the same provider are not thereby related
Protocol: a2a
Version: 1.0.0
Extensions: https://proof.holdings/delegation
Proof of Delegation: a signed token attesting that the principal domain authorized this agent artifact. Verify against the issuer JWKS; compare principal and delegate to independently resolved facts.

A2A protocol extensions the card declares. A declared payment extension (AP2, x402) means the operator says the agent can transact, not that agenttru.st has seen it do so.
Card completeness: a2a.proto v1.0 requires eight top-level fields. This card omits:
supportedInterfaces

Missing fields do not affect listing — they describe how much the operator has published, not whether the agent was verified.

View all card details

Capabilities: extensions pushNotifications stateTransitionHistory streaming
Agent card: https://proof.holdings/.well-known/agent-card.json

Operate this agent and would rather not be listed? Request removal.