Live 12-stage pipeline · No key · No signup

UTA Verify Playground

Paste any credential — JWT, W3C VC, ATC v3, A2A card, MCP card, X.509 — and run it through the full 12-stage fail-closed verification pipeline. Every stage, every failure, nothing hidden.

golden rule: UNKNOWN = DENY · ERROR = DENY · EXPIRED = DENY · REVOKED = DENY

Credential (JSON object, JSON string, JWT, or PEM)

Examples:

Detecting format… running 12 stages…

🧪 What actually runs

This is the production verifier — the same one agents call. ATC v3 credentials get real Ed25519 (RFC 8032) signature verification over RFC 8785 JCS canonical bytes.

🔒 Fail-closed, for real

Try the tampered ATC: an unknown signature value fails CRYPTO and the whole credential is DENIED. A random JSON gets DENIED at DETECT. Missing expiration is a WARN, never a silent pass.

🤖 For AI agents

Identical call for agents: POST /api/trust?action=verify with {"payload": …}.