AlgoVoi Live verifier

How to verify an agent-to-agent message

Agent-to-agent messages are verified using RFC 9421 HTTP Message Signatures (Ed25519) and an RFC 9530 Content-Digest over the body. You can verify them offline with the free AlgoVoi verifier, with no account and no network call required.

How it works

RFC 9421 signs a signature base, which includes: - The covered HTTP headers (e.g., Content-Digest, Date, Host). - The signature parameters (algorithm, key ID, created timestamp). - The Content-Digest of the body, which binds the payload to the signature. If the body is tampered with, the digest won't match, and verification fails.

This ensures both the headers and body are cryptographically tied to the sender's identity.

Offline and deterministic

Verification is offline and deterministic. Install the AlgoVoi verifier package, run it locally, and get a true/false result, no network calls, no external dependencies. The process is repeatable and auditable.

Key-anchoring: Verify against a trusted key

Always verify signatures against a public key anchored out of band (e.g., shared via a secure channel or registry). Never trust the public key carried inside the message envelope, as it could be tampered with.

Honest boundary

This is standards-based offline verification. It does not rely on a live network service (beyond the try-it endpoint), chain settlement, or third-party validators. Results are based solely on cryptographic proofs.

Get started