{
  "markdown": "<p align=\"center\">\n  <strong>Prove Before Act</strong><br>\n  <em>Trust primitive for AI agents & humans on MultiversX</em>\n</p>\n\n<p align=\"center\">\n  <a href=\"https://provebeforeact.com\">Live App</a> &bull;\n  <a href=\"#quick-start\">Quick Start</a> &bull;\n  <a href=\"#api-reference\">API</a> &bull;\n  <a href=\"#for-agents\">Agent Integration</a> &bull;\n  <a href=\"https://provebeforeact.com/leaderboard\">Trust Leaderboard</a> &bull;\n  <a href=\"docs/architecture.md\">Architecture</a> &bull;\n  <a href=\"CHANGELOG.md\">Changelog</a>\n</p>\n\n<p align=\"center\">\n  <img src=\"https://img.shields.io/badge/blockchain-MultiversX-23F7931E?style=flat-square\" alt=\"MultiversX\" />\n  <img src=\"https://img.shields.io/badge/protocol-MCP-blue?style=flat-square\" alt=\"MCP\" />\n  <img src=\"https://img.shields.io/badge/protocol-x402-purple?style=flat-square\" alt=\"x402\" />\n  <img src=\"https://img.shields.io/badge/protocol-ACP-orange?style=flat-square\" alt=\"ACP\" />\n  <img src=\"https://img.shields.io/badge/standard-MX--8004-teal?style=flat-square\" alt=\"MX-8004\" />\n  <img src=\"https://img.shields.io/badge/price-low%20flat%20rate-brightgreen?style=flat-square\" alt=\"low flat per-cert price\" />\n</p>\n\n---\n\n> **Trust is programmable.**\n> Prove Before Act anchors verifiable proofs of existence, authorship, and agent output on the MultiversX blockchain -- composable, API-first, built for both humans and autonomous agents.\n\n---\n\n## Live Proof\n\nThe Prove Before Act README is certified on the MultiversX blockchain.\n\n- **File:** README.md\n- **SHA-256:** 285da2ed7cced35b4d039a80956a4df8907bd33f83aaac8551b6f66c31251bd1\n- **Date:** February 23, 2026 at 09:49 UTC\n- **Transaction:** [41f1ebd363d28de787a2328a2bc99f0b3bad2d73f91baff649ee8a6516e7cc95](https://explorer.multiversx.com/transactions/41f1ebd363d28de787a2328a2bc99f0b3bad2d73f91baff649ee8a6516e7cc95)\n- **Network:** MultiversX Mainnet\n\n> This is not a demo. A real payment, a real hash, a real immutable proof.\n\n---\n\n## What is Prove Before Act?\n\n**Prove Before Act** is a trust primitive. It records SHA-256 file hashes on the [MultiversX](https://multiversx.com) blockchain, producing tamper-proof, publicly verifiable proofs of existence and ownership.\n\n- **Client-side hashing** -- SHA-256 is computed locally. Your file never leaves your device.\n- **On-chain anchoring** -- the hash is recorded as an immutable transaction on MultiversX mainnet with 6-second finality.\n- **Verifiable output** -- PDF certificate, QR code, public proof page, machine-readable JSON, and embeddable badge.\n- **Agent-native** -- discoverable and consumable by AI agents via MCP, ACP, x402, LangChain, CrewAI, Conway/Automaton, and OpenClaw.\n- **MX-8004 support** -- the integration can be enabled for the Trustless Agents Standard validation flow. Check [`/api/mx8004/status`](https://provebeforeact.com/api/mx8004/status) for whether it is active; the current production status is `not_configured`.\n\n### Why MultiversX?\n\nMultiversX is a European, carbon-negative blockchain with 6-second finality, negligible fees ($0.001/tx), and a growing ecosystem of AI-native protocols. Prove Before Act leverages its security and efficiency to deliver enterprise-grade certification at minimal cost.\n\n---\n\n## Why It Matters -- Real Scenarios\n\n> AI agents are already writing code, drafting contracts, generating reports,\n> and making decisions. But when something goes wrong -- who proves what was\n> produced, when, and by whom?\n\n**Prove Before Act is the answer layer.**\n\n---\n\n**\"My agent delivered this report\"**\nA LangChain agent generates a financial analysis for a client.\nProve Before Act certifies the output before delivery. If the client disputes the content\nlater, the blockchain timestamp is the proof. Irrefutable. No he-said-she-said.\n\n---\n\n**\"This build was not tampered with\"**\nYour CI/CD pipeline compiles and ships. Prove Before Act's GitHub Action certifies every\nartifact automatically. Six months later, a security audit asks:\n*\"Is this binary what you deployed?\"* -- one hash check, case closed.\n\n---\n\n**\"I can trust what Agent B gave me\"**\nMulti-agent pipelines have no native trust layer. When Agent A certifies its\noutput before handing off to Agent B, the chain of custody becomes verifiable.\nAgents can prove they did their job. Pipelines become auditable end-to-end.\n\n---\n\n**\"Agent identity can be verified on-chain\"**\nMX-8004 (Trustless Agents Standard) support is optional. When the integration is active,\neligible certifications can enter its identity, validation, and reputation flow. Check\n[`/api/mx8004/status`](https://provebeforeact.com/api/mx8004/status) before relying on\nMX-8004 identity or reputation data; production currently reports `not_configured`.\n\n---\n\n**\"We are compliant\"**\nRegulated industries need timestamped evidence of AI-generated decisions.\nProve Before Act turns every agent action into a blockchain-anchored record --\nready for audit, litigation, or regulatory review. Zero extra work.\n\n---\n\n**\"My trust score speaks for itself\"**\nAn autonomous agent builds reputation by certifying its outputs consistently over time.\nEvery confirmed certification contributes to its on-chain trust score -- visible on the public\nTrust Leaderboard at `/leaderboard`. Clients and peer agents query `/api/trust/{wallet}` before\nengaging. Trust becomes mathematical, not reputational.\n\n> **Historical benchmark:** the agent identifier `xproof_agent_verify` is a legacy\n> compatibility name. Its prior beta timings and leaderboard values are not current\n> production metrics. Use a public agent profile and proof response for live status.\n\n---\n\n**The pattern is always the same:**\n*Agent produces output -> Prove Before Act anchors it -> anyone can verify, forever.*\n\n---\n\n## Pricing\n\n**Low flat rate per certification.** No tiers, no subscriptions, no monthly fees. Current price is served live at https://provebeforeact.com/api/pricing.\n\nCurrent pricing: **https://provebeforeact.com/api/pricing**\n\n| Payment Method | Currency | Account Required |\n|---|---|---|\n| **x402** (HTTP 402) | USDC on Base | No |\n| **ACP** | EGLD | Yes (API key) |\n\nAgents can pay per-proof via x402 with zero onboarding -- send a request, receive payment requirements, sign, resend.\n\n---\n\n## Quick Start\n\n### Use the API (fastest)\n\n```bash\n# Certify a file in one call\ncurl -X POST https://provebeforeact.com/api/proof \\\n  -H \"Authorization: Bearer pm_your_api_key\" \\\n  -H \"Content-Type: application/json\" \\\n  -d '{\n    \"file_hash\": \"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\",\n    \"filename\": \"report.pdf\",\n    \"author_name\": \"Your Name\"\n  }'\n```\n\nResponse:\n\n```json\n{\n  \"proof_id\": \"uuid\",\n  \"status\": \"certified\",\n  \"file_hash\": \"e3b0c44...\",\n  \"verify_url\": \"https://provebeforeact.com/proof/uuid\",\n  \"certificate_url\": \"https://provebeforeact.com/api/certificates/uuid.pdf\",\n  \"proof_json_url\": \"https://provebeforeact.com/proof/uuid.json\",\n  \"blockchain\": {\n    \"network\": \"MultiversX\",\n    \"transaction_hash\": \"txhash...\",\n    \"explorer_url\": \"https://explorer.multiversx.com/transactions/txhash...\"\n  }\n}\n```\n\n### Use the Web App\n\nGo to [provebeforeact.com](https://provebeforeact.com), connect your MultiversX wallet, drop a file, certify. Done.\n\n### Self-Host\n\n```bash\ngit clone https://github.com/jasonxkensei/xProof.git  # legacy repository name retained for compatibility\ncd xProof\nnpm install\ncp .env.example .env   # configure your environment\nnpm run db:push         # initialize database\nnpm run dev             # starts on http://localhost:5000\n```\n\n**Prerequisites:** Node.js 20+, PostgreSQL (or Neon), MultiversX wallet.\n\nSee [docs/environment-variables.md](docs/environment-variables.md) for configuration details.\n\n---\n\n## For Developers\n\n### POST /api/proof -- Single Certification\n\nCertify one file hash on-chain in a single API call.\n\n```bash\ncurl -X POST https://provebeforeact.com/api/proof \\\n  -H \"Authorization: Bearer pm_your_api_key\" \\\n  -H \"Content-Type: application/json\" \\\n  -d '{\n    \"file_hash\": \"<64-char-sha256-hex>\",\n    \"filename\": \"output.txt\",\n    \"author_name\": \"Agent Name\",\n    \"webhook_url\": \"https://your-server.com/webhook\"\n  }'\n```\n\n| Field | Type | Required | Description |\n|---|---|---|---|\n| `file_hash` | string | Yes | SHA-256 hex hash (exactly 64 characters) |\n| `filename` | string | Yes | Original filename |\n| `author_name` | string | No | Defaults to \"AI Agent\" |\n| `webhook_url` | string | No | HTTPS URL for on-chain confirmation callback |\n\n### POST /api/batch -- Batch Certification\n\nCertify up to 50 files in a single call.\n\n```bash\ncurl -X POST https://provebeforeact.com/api/batch \\\n  -H \"Authorization: Bearer pm_your_api_key\" \\\n  -H \"Content-Type: application/json\" \\\n  -d '{\n    \"files\": [\\\n      {\"file_hash\": \"<hash1>\", \"filename\": \"file1.txt\"},\\\n      {\"file_hash\": \"<hash2>\", \"filename\": \"file2.py\"}\\\n    ],\n    \"author_name\": \"Agent Name\"\n  }'\n```\n\n### Verification\n\n| Endpoint | Returns |\n|---|---|\n| `GET /api/proof/:id` | Full certification record (JSON) |\n| `GET /proof/:id.json` | Structured proof document (JSON) |\n| `GET /proof/:id` | Human-readable proof page (HTML) |\n| `GET /api/certificates/:id.pdf` | PDF certificate with QR code |\n| `GET /badge/:id` | Dynamic SVG badge (shields.io style) |\n\n### Webhooks\n\nWhen a proof is anchored on-chain, Prove Before Act sends a POST to your `webhook_url` with HMAC-SHA256 signature in the `X-Webhook-Signature` header. Retry policy: 3 attempts with exponential backoff.\n\n### API Keys\n\nGenerate API keys from the [Settings](https://provebeforeact.com/settings) page after connecting your wallet. Keys use the `pm_` prefix and support per-key rate limiting.\n\n---\n\n## For Agents\n\nProve Before Act is designed to be discovered, consumed, and paid by autonomous agents across every major protocol.\n\n### Universal Compatibility\n\n| Protocol | Endpoint / Resource | Description |\n|---|---|---|\n| **MCP** | `POST /mcp` | JSON-RPC 2.0 endpoint with `certify_file` and `verify_proof` tools |\n| **x402** | `POST /api/proof`, `POST /api/batch` | HTTP 402 payment flow -- no account needed |\n| **ACP** | `GET /api/acp/products` | Agent Commerce Protocol -- discover, checkout, confirm |\n| **MX-8004** | On-chain registries | Supported integration; inspect `/api/mx8004/status` for active vs `not_configured` |\n| **OpenAI Plugin** | `GET /.well-known/ai-plugin.json` | ChatGPT plugin manifest |\n| **MCP Manifest** | `GET /.well-known/mcp.json` | Model Context Protocol discovery |\n| **Agent Protocol** | `GET /.well-known/agent.json` | Agent discovery manifest |\n| **LangChain** | `GET /agent-tools/langchain.py` | Python tool definition |\n| **CrewAI** | `GET /agent-tools/crewai.py` | Python tool definition |\n| **llms.txt** | `GET /llms.txt`, `GET /llms-full.txt` | LLM-friendly documentation |\n\n### x402 -- Pay Per Proof, No Account\n\nAny agent can certify without an API key using the x402 payment protocol:\n\n1. Send `POST /api/proof` without auth\n2. Receive HTTP 402 with payment requirements (USDC on Base, `eip155:8453`)\n3. Sign the payment and resend with `X-PAYMENT` header\n4. Receive the proof\n\n**Low flat rate per certification.** Current pricing: https://provebeforeact.com/api/pricing. No signup. No API key. No account.\n\n### MCP -- Model Context Protocol\n\nProve Before Act exposes a live MCP server at `POST /mcp` with two tools:\n\n- `certify_file` -- certify a file hash on MultiversX\n- `verify_proof` -- verify an existing certification\n\nAny MCP-compatible agent can discover and call these tools directly.\n\n### ACP -- Agent Commerce Protocol\n\nFull commerce flow for programmatic purchasing:\n\n```\nGET  /api/acp/products       # Discover products and pricing\nGET  /api/acp/openapi.json   # OpenAPI 3.0 specification\nPOST /api/acp/checkout       # Start checkout session\nPOST /api/acp/confirm        # Confirm transaction\nGET  /api/acp/health          # Health check\n```\n\n### MX-8004 -- MultiversX Trustless Agents Standard\n\nProve Before Act supports an MX-8004 validation integration, but support and\nactivation are distinct. The current production response from\n[`/api/mx8004/status`](https://provebeforeact.com/api/mx8004/status) is\n`status: \"not_configured\"`, so certifications are not presently registered in\nMX-8004.\n\nWhen configured, the integration exposes identity, validation, reputation, and\ntransaction-queue capabilities. Treat a certification as MX-8004 validated only\nwhen its live status response confirms the active integration and validation result.\n\n### Conway/Automaton Skill\n\nProve Before Act ships a ready-made skill for [Conway Automatons](https://github.com/Conway-Research/automaton):\n\n```\nskills/prove-before-act/SKILL.md\n```\n\nAn Automaton installs the skill and can immediately certify its outputs on MultiversX -- proving the value it creates to its creator, to clients, and to peer agents. This aligns directly with the Automaton survival-by-work model.\n\n### Agent Trust Leaderboard\n\nEvery certification builds cumulative on-chain reputation. The Trust Leaderboard makes it public and discoverable.\n\n- **Pages**: `/leaderboard` — public, sortable, filterable. `/agent/{wallet}` — individual profile with stats, streak, and recent certs timeline.\n- **Trust Score**: `confirmed_certs × 10 + last_30d × 5 + seniority_bonus (max 150) + streak_bonus (consecutive weeks × 8, max 100)`\n- **Trust Levels**: Newcomer (0–99) → Active (100–299) → Trusted (300–699) → Verified (700+)\n- **Opt-in**: Configure your public profile via Settings or `PATCH /api/user/agent-profile`\n- **Trust Badge**: Embed in any README — `GET /badge/trust/{wallet}.svg` returns a dynamic shields.io-style badge showing current level and score\n\n**Reference agent:** `xproof_agent_verify` is a legacy agent identifier retained\nfor compatibility. Fetch its public profile and proof records for current metrics\nrather than relying on historic benchmark values.\n- Full review: [moltbook.com](https://www.moltbook.com/post/1d6cf96b-5046-4c63-9ae5-43f8809f4562)\n\n---\n\n### OpenClaw Skill\n\nClawHub-standard skill for the OpenClaw ecosystem:\n\n- Repository: [`github.com/jasonxkensei/xproof-openclaw-skill`](https://github.com/jasonxkensei/xproof-openclaw-skill) *(legacy repository name retained for compatibility)*\n- Includes `SKILL.md`, `certify.sh`, and full API reference\n\n### GitHub Action\n\nIntegrate Prove Before Act into your CI/CD pipeline:\n\n```yaml\n- uses: jasonxkensei/xProof-Action@v1 # legacy action identifier retained for compatibility\n  with:\n    api_key: ${{ secrets.XPROOF_API_KEY }}\n    files: dist/**\n```\n\nHashes build artifacts and certifies them on MultiversX automatically on every deployment.\n\nSee [`github-action/README.md`](github-action/README.md) for full documentation.\n\n---\n\n## How It Works\n\n```\nUser/Agent                    Prove Before Act                     MultiversX\n    |                           |                           |\n    |  1. Submit file hash      |                           |\n    |     (API / Web / MCP)     |                           |\n    |-------------------------->|                           |\n    |                           |                           |\n    |  2. SHA-256 validated     |                           |\n    |     (client-side or API)  |                           |\n    |                           |                           |\n    |                           |  3. Transaction signed    |\n    |                           |     & broadcast           |\n    |                           |-------------------------->|\n    |                           |                           |\n    |                           |  4. Anchored on-chain     |\n    |                           |     (6s finality)         |\n    |                           |<--------------------------|\n    |                           |                           |\n    |  5. Proof returned        |  6. MX-8004 validation    |\n    |     (JSON + PDF + URL)    |     only when active      |\n    |<--------------------------|-------------------------->|\n    |                           |                           |\n    |  7. Webhook notification  |                           |\n    |     (HMAC-signed)         |                           |\n    |<--------------------------|                           |\n```\n\n---\n\n## Core Capabilities\n\n| Capability | Description |\n|---|---|\n| **Client-Side Hashing** | SHA-256 computed in-browser. Zero data leaves your device. |\n| **Blockchain Anchoring** | Immutable proof on MultiversX mainnet. |\n| **MX-8004 Support** | Optional on-chain validation, reputation, and identity integration; inspect `/api/mx8004/status` for live activation. |\n| **x402 Payments** | HTTP 402 native payment -- USDC on Base, no account needed. |\n| **PDF Certificates** | Downloadable certificate with QR code linking to blockchain explorer. |\n| **Public Proof Pages** | Shareable `/proof/:id` pages for independent verification. |\n| **Verification Badges** | Dynamic SVG badges (shields.io style) with embeddable Markdown. |\n| **Wallet Authentication** | Native Auth via xPortal, MultiversX Web Wallet, WalletConnect. |\n| **Agent Commerce Protocol** | Agents discover, purchase, and consume certifications programmatically. |\n| **MCP Server** | JSON-RPC 2.0 endpoint with `certify_file` and `verify_proof` tools. |\n| **LangChain / CrewAI** | Ready-made Python tool definitions. |\n| **Webhook Delivery** | HMAC-SHA256 signed notifications with retry and exponential backoff. |\n| **API Keys** | `pm_`-prefixed bearer tokens with per-key rate limiting. |\n| **LLM Discovery** | `llms.txt`, OpenAI plugin, MCP manifest, agent.json -- all served. |\n| **GitHub Action** | CI/CD integration -- hash and certify build artifacts automatically. |\n| **Conway/Automaton Skill** | Ready-made SKILL.md for sovereign agent output certification. |\n| **OpenClaw Skill** | ClawHub-standard skill with shell script and API reference. |\n| **Agent Trust Leaderboard** | Public on-chain trust registry. Score = certified certs × history × streak. Levels: Newcomer / Active / Trusted / Verified. Dynamic SVG badge embeddable in any README. |\n\n---\n\n## API Reference\n\nFull documentation: [docs/api-reference.md](docs/api-reference.md)\n\n### Core Endpoints\n\n| Method | Endpoint | Auth | Description |\n|---|---|---|---|\n| `POST` | `/api/proof` | API Key / x402 | Certify a file hash (single call) |\n| `POST` | `/api/batch` | API Key / x402 | Batch certification (up to 50 files) |\n| `GET` | `/api/proof/:id` | Public | Get proof data |\n| `GET` | `/proof/:id.json` | Public | Structured proof document |\n| `GET` | `/proof/:id` | Public | Human-readable proof page |\n| `GET` | `/api/certificates/:id.pdf` | Public | Download PDF certificate |\n| `GET` | `/badge/:id` | Public | Dynamic SVG badge |\n| `GET` | `/api/pricing` | Public | Current pricing & tier info |\n| `GET` | `/api/leaderboard` | Public | Top 50 agents sorted by trust score |\n| `GET` | `/api/agents/:wallet` | Public | Agent profile with trust score and certification history |\n| `GET` | `/api/trust/:wallet` | Public | Trust score + level lookup (no profile required) |\n| `GET` | `/badge/trust/:wallet.svg` | Public | Dynamic trust badge (shields.io style) |\n| `GET` | `/badge/trust/:wallet/markdown` | Public | Ready-to-embed trust badge markdown |\n| `PATCH` | `/api/user/agent-profile` | Session | Update public agent profile |\n\n### Authentication\n\n| Method | Endpoint | Auth | Description |\n|---|---|---|---|\n| `POST` | `/api/auth/wallet/sync` | Native Auth | Authenticate via wallet signature |\n| `GET` | `/api/auth/me` | Session | Get current user |\n| `POST` | `/api/auth/logout` | Session | End session |\n\n### Agent Commerce Protocol\n\n| Method | Endpoint | Auth | Description |\n|---|---|---|---|\n| `GET` | `/api/acp/products` | Public | Discover products and pricing |\n| `GET` | `/api/acp/openapi.json` | Public | OpenAPI 3.0 specification |\n| `POST` | `/api/acp/checkout` | API Key | Start checkout session |\n| `POST` | `/api/acp/confirm` | API Key | Confirm transaction |\n| `GET` | `/api/acp/health` | Public | Health check |\n\n### API Key Management\n\n| Method | Endpoint | Auth | Description |\n|---|---|---|---|\n| `POST` | `/api/keys` | Session | Create API key |\n| `GET` | `/api/keys` | Session | List API keys |\n| `DELETE` | `/api/keys/:id` | Session | Revoke API key |\n\n---\n\n## License\n\nProprietary — source available. See [LICENSE](LICENSE).\n",
  "bytes": 20283,
  "sha": "b2ff85b45988c2715b4c54a51175d875ff04cd42b2dc19e96d03609f625a9d6f",
  "repo_slug": "jasonxkensei/xproof",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/mcp_io_github_jasonxkensei_xproof_68d16295/readme"
}