eSignVerification

{
  "name": "eSignVerification",
  "description": "Verify the electronic signatures on a PDF against the live EU trusted list. Establishes whether each signature is qualified (QESig) or advanced (AdESig) under eIDAS, checks byte-range integrity and CMS/PKCS#7 cryptography, and anchors the signer's issuing CA in the published trusted list of every EU member state.",
  "version": "1.0.0",
  "supportedInterfaces": [
    {
      "url": "https://a2a.esign.spocont.com",
      "protocolBinding": "JSONRPC",
      "protocolVersion": "1.0"
    },
    {
      "url": "https://esign.spocont.com/a2a",
      "protocolBinding": "JSONRPC",
      "protocolVersion": "1.0"
    }
  ],
  "capabilities": {
    "streaming": false,
    "pushNotifications": false,
    "extendedAgentCard": false
  },
  "skills": [
    {
      "id": "esign_verify",
      "name": "esign_verify",
      "description": "[Execution] Verify the electronic signatures on a PDF. Send the document as base64 in `pdf_base64`. Returns one entry per signature: the signer, the issuing CA, the claimed signing time, the eIDAS qualification (QESig / AdESig / Unknown), and the individual checks \u2014 byte-range integrity, CMS/PKCS#7 cryptographic validity, EU trusted-list anchoring, and whether the signature covers the whole document. Partial coverage is reported as a fact, not as tampering. Consumes 1 verification credit."
    },
    {
      "id": "esign_status",
      "name": "esign_status",
      "description": "[Research] Remaining verification credits and the expiry date of the soonest-expiring batch. Free \u2014 no credits consumed."
    },
    {
      "id": "esign_trusted_list",
      "name": "esign_trusted_list",
      "description": "[Research] State of the EU trusted list this service verifies against: number of anchors, number of member-state lists, and when it was last published. Call this to judge how current the trust data is before relying on a verdict. Free \u2014 no credits consumed."
    }
  ],
  "securitySchemes": {
    "bearer": {
      "httpAuthSecurityScheme": {
        "scheme": "bearer",
        "bearerFormat": "JWT",
        "description": "Bearer token from https://esign.spocont.com"
      }
    }
  },
  "securityRequirements": [
    {
      "schemes": {
        "bearer": {
          "list": []
        }
      }
    }
  ],
  "defaultInputModes": [
    "application/json"
  ],
  "defaultOutputModes": [
    "application/json"
  ],
  "registry": "https://a2a-registry.spocont.com"
}