xProof

xProof
Trust primitive for AI agents & humans on MultiversX

Live App • Quick Start • API • Agent Integration • Architecture • Changelog

Trust is programmable. xProof anchors verifiable proofs of existence, authorship, and agent output on the MultiversX blockchain -- composable, API-first, built for both humans and autonomous agents.

What is xProof?

xProof is a trust primitive. It records SHA-256 file hashes on the MultiversX blockchain, producing tamper-proof, publicly verifiable proofs of existence and ownership.

• Client-side hashing -- SHA-256 is computed locally. Your file never leaves your device.
• On-chain anchoring -- the hash is recorded as an immutable transaction on MultiversX mainnet with 6-second finality.
• Verifiable output -- PDF certificate, QR code, public proof page, machine-readable JSON, and embeddable badge.
• Agent-native -- discoverable and consumable by AI agents via MCP, ACP, x402, LangChain, CrewAI, Conway/Automaton, and OpenClaw.
• MX-8004 compliant -- full Trustless Agents Standard integration with on-chain validation loop and reputation scoring.

Why MultiversX?

MultiversX is a European, carbon-negative blockchain with 6-second finality, negligible fees ($0.001/tx), and a growing ecosystem of AI-native protocols. xProof leverages its security and efficiency to deliver enterprise-grade certification at minimal cost.

Pricing

$0.05 per certification -- pay-as-you-go. No subscriptions. No monthly fees.

Agents can pay per-proof via x402 with zero onboarding -- send a request, receive payment requirements, sign, resend.

Quick Start

Use the API (fastest)

# Certify a file in one call
curl -X POST https://xproof.app/api/proof \
  -H "Authorization: Bearer pm_your_api_key" \
  -H "Content-Type: application/json" \
  -d '{
    "file_hash": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
    "filename": "report.pdf",
    "author_name": "Your Name"
  }'

Response:

{
  "proof_id": "uuid",
  "status": "certified",
  "file_hash": "e3b0c44...",
  "verify_url": "https://xproof.app/proof/uuid",
  "certificate_url": "https://xproof.app/api/certificates/uuid.pdf",
  "proof_json_url": "https://xproof.app/proof/uuid.json",
  "blockchain": {
    "network": "MultiversX",
    "transaction_hash": "txhash...",
    "explorer_url": "https://explorer.multiversx.com/transactions/txhash..."
  }
}

Use the Web App

Go to xproof.app, connect your MultiversX wallet, drop a file, certify. Done.

Self-Host

git clone https://github.com/jasonxkensei/xproof.git
cd xproof
npm install
cp .env.example .env   # configure your environment
npm run db:push         # initialize database
npm run dev             # starts on http://localhost:5000

Prerequisites: Node.js 20+, PostgreSQL (or Neon), MultiversX wallet.

See docs/environment-variables.md for configuration details.

For Developers

POST /api/proof -- Single Certification

Certify one file hash on-chain in a single API call.

curl -X POST https://xproof.app/api/proof \
  -H "Authorization: Bearer pm_your_api_key" \
  -H "Content-Type: application/json" \
  -d '{
    "file_hash": "<64-char-sha256-hex>",
    "filename": "output.txt",
    "author_name": "Agent Name",
    "webhook_url": "https://your-server.com/webhook"
  }'

POST /api/batch -- Batch Certification

Certify up to 50 files in a single call.

curl -X POST https://xproof.app/api/batch \
  -H "Authorization: Bearer pm_your_api_key" \
  -H "Content-Type: application/json" \
  -d '{
    "files": [
      {"file_hash": "<hash1>", "filename": "file1.txt"},
      {"file_hash": "<hash2>", "filename": "file2.py"}
    ],
    "author_name": "Agent Name"
  }'

Verification

Webhooks

When a proof is anchored on-chain, xProof sends a POST to your webhook_url with HMAC-SHA256 signature in the X-Webhook-Signature header. Retry policy: 3 attempts with exponential backoff.

API Keys

Generate API keys from the Settings page after connecting your wallet. Keys use the pm_ prefix and support per-key rate limiting.

For Agents

xProof is designed to be discovered, consumed, and paid by autonomous agents across every major protocol.

Universal Compatibility

x402 -- Pay Per Proof, No Account

Any agent can certify without an API key using the x402 payment protocol:

1. Send POST /api/proof without auth
2. Receive HTTP 402 with payment requirements (USDC on Base, eip155:8453)
3. Sign the payment and resend with X-PAYMENT header
4. Receive the proof

Cost: $0.05 per certification. No signup. No API key. No account.

MCP -- Model Context Protocol

xProof exposes a live MCP server at POST /mcp with two tools:

• certify_file -- certify a file hash on MultiversX
• verify_proof -- verify an existing certification

Any MCP-compatible agent can discover and call these tools directly.

ACP -- Agent Commerce Protocol

Full commerce flow for programmatic purchasing:

GET  /api/acp/products       # Discover products and pricing
GET  /api/acp/openapi.json   # OpenAPI 3.0 specification
POST /api/acp/checkout       # Start checkout session
POST /api/acp/confirm        # Confirm transaction
GET  /api/acp/health          # Health check

MX-8004 -- MultiversX Trustless Agents Standard

xProof is natively integrated with MX-8004, providing:

• Identity Registry -- agent registration with soulbound NFTs
• Validation Registry -- full validation loop for certifications reaching "Verified" status on-chain
• Reputation Registry -- cumulative on-chain reputation scoring with feedback
• Persistent TX Queue -- PostgreSQL-backed transaction queue with nonce management and exponential backoff retry

Every certification registered through xProof can be validated and scored on-chain, building a verifiable reputation for the certifying agent.

Conway/Automaton Skill

xProof ships a ready-made skill for Conway Automatons:

skills/xproof/SKILL.md

An Automaton installs the skill and can immediately certify its outputs on MultiversX -- proving the value it creates to its creator, to clients, and to peer agents. This aligns directly with the Automaton survival-by-work model.

OpenClaw Skill

ClawHub-standard skill for the OpenClaw ecosystem:

• Repository: github.com/jasonxkensei/xproof-openclaw-skill
• Includes SKILL.md, certify.sh, and full API reference

GitHub Action

Integrate xProof into your CI/CD pipeline:

- uses: jasonxkensei/xproof/github-action@main
  with:
    api_key: ${{ secrets.XPROOF_API_KEY }}
    files: dist/**

Hashes build artifacts and certifies them on MultiversX automatically on every deployment.

See github-action/README.md for full documentation.

How It Works

User/Agent                    xProof                     MultiversX
    |                           |                           |
    |  1. Submit file hash      |                           |
    |     (API / Web / MCP)     |                           |
    |-------------------------->|                           |
    |                           |                           |
    |  2. SHA-256 validated     |                           |
    |     (client-side or API)  |                           |
    |                           |                           |
    |                           |  3. Transaction signed    |
    |                           |     & broadcast           |
    |                           |-------------------------->|
    |                           |                           |
    |                           |  4. Anchored on-chain     |
    |                           |     (6s finality)         |
    |                           |<--------------------------|
    |                           |                           |
    |  5. Proof returned        |  6. MX-8004 validation    |
    |     (JSON + PDF + URL)    |     registered            |
    |<--------------------------|-------------------------->|
    |                           |                           |
    |  7. Webhook notification  |                           |
    |     (HMAC-signed)         |                           |
    |<--------------------------|                           |

Core Capabilities

API Reference

Full documentation: docs/api-reference.md

Core Endpoints

Authentication

Agent Commerce Protocol

API Key Management

MCP Server

Discovery

Health & Monitoring

Tech Stack

Project Structure

xproof/
  client/
    src/
      components/              # UI components (wallet modal, shadcn/ui)
      lib/
        hashFile.ts            # SHA-256 client-side hashing
        generateProofPDF.ts    # PDF certificate generation
        multiversxTransaction.ts  # Transaction building
        walletAuth.ts          # Wallet authentication helpers
      pages/
        landing.tsx            # Homepage
        certify.tsx            # File certification flow
        dashboard.tsx          # User certifications history
        proof.tsx              # Public proof verification page
        agents.tsx             # Agent integration showcase
        settings.tsx           # User settings & API keys
        admin.tsx              # Admin dashboard
  server/
    index.ts                   # Express server entry point
    routes.ts                  # All API routes (REST + ACP + MCP + discovery)
    db.ts                      # Database connection (Drizzle + Neon)
    blockchain.ts              # MultiversX blockchain interactions
    mx8004.ts                  # MX-8004 Trustless Agents Standard
    mcp.ts                     # MCP server implementation
    x402.ts                    # x402 payment protocol
    webhook.ts                 # HMAC-signed webhook delivery
    txQueue.ts                 # Persistent transaction queue
    txAlerts.ts                # Transaction failure alerting
    metrics.ts                 # Blockchain latency monitoring
    logger.ts                  # Structured JSON logging
    certificateGenerator.ts    # Server-side PDF generation
    nativeAuth.ts              # Native Auth token verification
    walletAuth.ts              # Session & wallet middleware
    pricing.ts                 # Dynamic pricing logic
    xmoney.ts                  # xMoney payment integration
    prerender.ts               # SEO pre-rendering for crawlers
    reliability.ts             # Rate limiting
  shared/
    schema.ts                  # Database schema (Drizzle) + Zod validators + ACP types
  github-action/               # Composite GitHub Action for CI/CD
  openclaw-skill/              # OpenClaw ecosystem skill
  skills/
    xproof/                    # Conway/Automaton skill
  docs/                        # Documentation

Contributing

See CONTRIBUTING.md for guidelines.

Security

See SECURITY.md for our security policy and how to report vulnerabilities.

Code of Conduct

See CODE_OF_CONDUCT.md.

Legal

Copyright (c) 2025-2026 xProof. All rights reserved.

This software is proprietary. Unauthorized copying, modification, distribution, or use of this software, via any medium, is strictly prohibited without prior written permission from the copyright holder.

For licensing inquiries, contact the repository owner.