{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://artifacts.apis.io/axiorank-com/json-schema/axiorank-com-card-verify-response-schema.json",
  "title": "CardVerifyResponse",
  "x-generated": "2026-11-02",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/axiorank-com-openapi.json#/components/schemas/CardVerifyResponse",
  "type": "object",
  "properties": {
    "decision": {
      "type": "string",
      "enum": [
        "allow",
        "review",
        "deny"
      ]
    },
    "reason": {
      "type": "string"
    },
    "risk": {
      "type": "integer",
      "minimum": 0,
      "maximum": 100
    },
    "protocol": {
      "type": "string",
      "description": "Resolved protocol of the card (a2a, mcp, oauth, …)."
    },
    "identity": {
      "type": "object",
      "properties": {
        "name": {
          "type": [
            "string",
            "null"
          ]
        },
        "provider": {
          "type": [
            "string",
            "null"
          ]
        },
        "signed": {
          "type": "boolean"
        },
        "signatureValid": {
          "type": [
            "boolean",
            "null"
          ],
          "description": "true = verified · false = forged · null = unsigned / key unresolvable."
        },
        "keySource": {
          "type": "string",
          "enum": [
            "embedded",
            "jwks",
            "none"
          ]
        },
        "keyDomainBound": {
          "type": "boolean"
        },
        "keyId": {
          "type": [
            "string",
            "null"
          ]
        },
        "sourceUrl": {
          "type": "string"
        }
      },
      "required": [
        "name",
        "provider",
        "signed",
        "signatureValid",
        "keySource",
        "keyDomainBound",
        "keyId",
        "sourceUrl"
      ]
    },
    "capabilities": {
      "type": "object",
      "properties": {
        "count": {
          "type": "integer"
        },
        "sample": {
          "type": "array",
          "items": {
            "type": "object",
            "properties": {
              "kind": {
                "type": "string"
              },
              "name": {
                "type": "string"
              }
            },
            "required": [
              "kind",
              "name"
            ]
          }
        }
      },
      "required": [
        "count",
        "sample"
      ]
    },
    "auth": {
      "type": "object",
      "properties": {
        "schemes": {
          "type": "array",
          "items": {
            "type": "string"
          }
        },
        "protectedResource": {
          "type": "boolean"
        }
      },
      "required": [
        "schemes",
        "protectedResource"
      ]
    },
    "warnings": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "signals": {
      "type": "array",
      "items": {
        "$ref": "#/$defs/RiskSignal"
      }
    },
    "cardId": {
      "type": "string"
    }
  },
  "required": [
    "decision",
    "reason",
    "risk",
    "protocol",
    "identity",
    "capabilities",
    "auth",
    "warnings",
    "signals",
    "cardId"
  ],
  "$defs": {
    "RiskSignal": {
      "type": "object",
      "description": "A redacted content-inspection finding that contributed to the risk score.",
      "properties": {
        "detector": {
          "type": "string"
        },
        "category": {
          "type": "string",
          "enum": [
            "secret",
            "pii",
            "destructive",
            "injection",
            "egress",
            "bot_spoof",
            "rate_abuse",
            "supply_chain"
          ]
        },
        "severity": {
          "type": "string",
          "enum": [
            "low",
            "medium",
            "high",
            "critical"
          ]
        },
        "label": {
          "type": "string"
        },
        "points": {
          "type": "integer",
          "description": "Pre-diminishing-returns contribution, from severity."
        },
        "location": {
          "type": "string"
        },
        "evidence": {
          "type": "string",
          "description": "Redacted evidence, safe to persist and display."
        },
        "critical": {
          "type": "boolean",
          "description": "A live secret / key / card was detected."
        }
      },
      "required": [
        "detector",
        "category",
        "severity",
        "label",
        "points",
        "location",
        "evidence"
      ]
    }
  }
}