Documentation
Everything you need to integrate, understand and extend SecureStamp: from verifying where a message comes from to governing what your MCP servers, agents and harnesses do.
Public REST endpoints: domain and email trust checks, registry lookup, stamp embed, quota and events. Agent and execution endpoints are documented with Action Proof and the MCP manifest.
The complete guide for developers and institutions: Doctor on native files, Break the Mandate, Exact Export of the reviewed candidate, portable configuration through npm, CLI and dashboard, confirmed hold and stop, reports and their limits.
Authorize the effect, not just access to the tool: the canonical example, the three steps, the local authorization ceiling, the contracts the verifier recomputes, and how to verify a receipt offline.
A local kit that reads the config files you point it at, names what it found — an inline secret, a shell launch, an unpinned package — and proposes a minimal corrected version on a copy. No account, no data leaving the machine.
The specification for a signed, revisable mandate: tenant, actors, Guardian, revision, steps, budget, validity window, policy and revocation — plus the deliberate exclusions and the known gaps of the local runtime, listed until they close.
What is proven, and what is not. The four evidence levels, the rules that make a coverage claim refutable, the named threats with their open gaps, and everything that sits outside the guarantee.
Profiles HP0–HP2 and lab levels LR0–LR2, the failure families behind the tests, evidence applicability per route, exact export through the Execution Guardian, stop and campaign budget — and what the lab does not prove.
The same layer at specification depth: the five-link proof chain, single-use grants, quorum profiles as signed policy snapshots, the open adapter platform and the evidence boundaries.
Technical specification and design rationale for the SecureStamp protocol: five-level trust model, notarial layer, Action Verdict, the Action Proof execution chain, signals, scoring and architecture.
How SecureStamp reaches L5 Certified: an ES256-signed notarial record of the message envelope plus business-identity (KYB) review. The five levels and the honest boundary: it certifies origin and integrity, not content truthfulness.
The Gmail extension and the Outlook add-in are published on the Chrome Web Store and Microsoft AppSource. What each one reads, which permissions it asks for, what leaves the device and what never does.
End-to-end encryption between verified identities is documented as a technical roadmap item. It is intentionally held back from the first .online onboarding and plugin release.
Guide to joining the SecureStamp federated network: requirements, setup, configuration, and node operator obligations.
Formal SSTP protocol specification on GitHub: messages, cryptography, validation, and federation rules.
Dictionary of SecureStamp, cryptography, email, protocol and infrastructure terms for end users, support teams and junior developers.
Quick start
The fastest way to check a domain or email: a single POST request. Anonymous checks need no authentication and are rate-limited.
Try the verifiercurl -X POST https://securestamp.online/api/trust/check \
-H "Content-Type: application/json" \
-d '{"target":"example.com"}'