Certification API

Certify any skill. Even ones we don't host.

One POST runs your skill file through the same proprietary review engine behind the review_skill MCP tool — and issues a permanent audit badge bound to the file's SHA-256. Anyone holding the file can verify the badge refers to exactly that content. No account, no registry upload.

Content-bound

The badge is keyed to the file's SHA-256 — change one byte and verification fails.

Injection-screened

Submissions run through the prompt-injection guard; findings are recorded on the public verification record.

Embeddable anywhere

A shields-style SVG for your README, docs or marketplace listing — every impression links back to the verification record.

1. Submit the file

Pass the raw file content — not a summary. Up to 120k characters; 10 certifications per hour per IP.

certify.sh

curl -X POST https://superagentskill.com/api/public/certify \
  -H 'Content-Type: application/json' \
  -d '{
    "name": "my-incident-response.md",
    "type": "skill",
    "content": "<paste the raw skill file here>"
  }'

2. Get the badge

The response includes the score, the grade, the permanent badge URL and a ready-to-paste markdown snippet.

response.json

{
  "id": "0b7c…",
  "overall_score": 84,
  "grade": "B — solid, minor gaps",
  "content_sha256": "9f2a…",
  "badge_url": "https://superagentskill.com/api/badges/certified/0b7c….svg",
  "verify_url": "https://superagentskill.com/api/public/certifications/0b7c…",
  "embed_markdown": "[![skill audit](…/certified/0b7c….svg)](…/certifications/0b7c…)",
  "report": { "top_actions": [ … ], "injection_findings": { "severity": "none" } }
}

3. Anyone can verify

The verification record at verify_url is public. A reviewer hashes the file they were given (sha256sum my-skill.md) and compares it with content_sha256 — a match proves this exact content earned this score on the issued date.

Audit badge vs. Trust Score

The skill audit badge scores the content itself. The registry Trust Score goes further — adversarial pass rate per attack class, real-world success telemetry and Ed25519-signed releases. To earn the full Trust Score, publish your skill to the registry.