Attest Model

Attest Model

curl --request POST \
  --url https://api.truthlocks.com/v1/models/attest \
  --header 'Content-Type: application/json' \
  --header 'X-API-Key: <api-key>' \
  --data '
{
  "name": "fraud-detection-v2",
  "hash": "a1b2c3d4e5f6789012345678abcdef0123456789abcdef0123456789abcdef01",
  "framework": "pytorch",
  "version": "2.1.0",
  "agent_id": "550e8400-e29b-41d4-a716-446655440000",
  "training_dataset_ids": [
    "660e8400-e29b-41d4-a716-446655440000"
  ]
}
'

import requests

url = "https://api.truthlocks.com/v1/models/attest"

payload = {
    "name": "fraud-detection-v2",
    "hash": "a1b2c3d4e5f6789012345678abcdef0123456789abcdef0123456789abcdef01",
    "framework": "pytorch",
    "version": "2.1.0",
    "agent_id": "550e8400-e29b-41d4-a716-446655440000",
    "training_dataset_ids": ["660e8400-e29b-41d4-a716-446655440000"]
}
headers = {
    "X-API-Key": "<api-key>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {'X-API-Key': '<api-key>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    name: 'fraud-detection-v2',
    hash: 'a1b2c3d4e5f6789012345678abcdef0123456789abcdef0123456789abcdef01',
    framework: 'pytorch',
    version: '2.1.0',
    agent_id: '550e8400-e29b-41d4-a716-446655440000',
    training_dataset_ids: ['660e8400-e29b-41d4-a716-446655440000']
  })
};

fetch('https://api.truthlocks.com/v1/models/attest', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.truthlocks.com/v1/models/attest",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'name' => 'fraud-detection-v2',
    'hash' => 'a1b2c3d4e5f6789012345678abcdef0123456789abcdef0123456789abcdef01',
    'framework' => 'pytorch',
    'version' => '2.1.0',
    'agent_id' => '550e8400-e29b-41d4-a716-446655440000',
    'training_dataset_ids' => [
        '660e8400-e29b-41d4-a716-446655440000'
    ]
  ]),
  CURLOPT_HTTPHEADER => [
    "Content-Type: application/json",
    "X-API-Key: <api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.truthlocks.com/v1/models/attest"

	payload := strings.NewReader("{\n  \"name\": \"fraud-detection-v2\",\n  \"hash\": \"a1b2c3d4e5f6789012345678abcdef0123456789abcdef0123456789abcdef01\",\n  \"framework\": \"pytorch\",\n  \"version\": \"2.1.0\",\n  \"agent_id\": \"550e8400-e29b-41d4-a716-446655440000\",\n  \"training_dataset_ids\": [\n    \"660e8400-e29b-41d4-a716-446655440000\"\n  ]\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("X-API-Key", "<api-key>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.truthlocks.com/v1/models/attest")
  .header("X-API-Key", "<api-key>")
  .header("Content-Type", "application/json")
  .body("{\n  \"name\": \"fraud-detection-v2\",\n  \"hash\": \"a1b2c3d4e5f6789012345678abcdef0123456789abcdef0123456789abcdef01\",\n  \"framework\": \"pytorch\",\n  \"version\": \"2.1.0\",\n  \"agent_id\": \"550e8400-e29b-41d4-a716-446655440000\",\n  \"training_dataset_ids\": [\n    \"660e8400-e29b-41d4-a716-446655440000\"\n  ]\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.truthlocks.com/v1/models/attest")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["X-API-Key"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"name\": \"fraud-detection-v2\",\n  \"hash\": \"a1b2c3d4e5f6789012345678abcdef0123456789abcdef0123456789abcdef01\",\n  \"framework\": \"pytorch\",\n  \"version\": \"2.1.0\",\n  \"agent_id\": \"550e8400-e29b-41d4-a716-446655440000\",\n  \"training_dataset_ids\": [\n    \"660e8400-e29b-41d4-a716-446655440000\"\n  ]\n}"

response = http.request(request)
puts response.read_body

{
  "model_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "receipt_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "name": "<string>",
  "hash": "<string>",
  "framework": "<string>",
  "version": "<string>",
  "agent_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "training_dataset_ids": [
    "3c90c3cc-0d44-4b50-8888-8dd25736052a"
  ],
  "created_at": "2023-11-07T05:31:56Z"
}

{
  "code": "AUTH_REQUIRED",
  "message": "Authentication required",
  "http_status": 401
}

{
  "code": "AUTH_REQUIRED",
  "message": "Authentication required",
  "http_status": 401
}

{
  "code": "AUTH_REQUIRED",
  "message": "Authentication required",
  "http_status": 401
}

POST

models

attest

Attest Model

curl --request POST \
  --url https://api.truthlocks.com/v1/models/attest \
  --header 'Content-Type: application/json' \
  --header 'X-API-Key: <api-key>' \
  --data '
{
  "name": "fraud-detection-v2",
  "hash": "a1b2c3d4e5f6789012345678abcdef0123456789abcdef0123456789abcdef01",
  "framework": "pytorch",
  "version": "2.1.0",
  "agent_id": "550e8400-e29b-41d4-a716-446655440000",
  "training_dataset_ids": [
    "660e8400-e29b-41d4-a716-446655440000"
  ]
}
'

import requests

url = "https://api.truthlocks.com/v1/models/attest"

payload = {
    "name": "fraud-detection-v2",
    "hash": "a1b2c3d4e5f6789012345678abcdef0123456789abcdef0123456789abcdef01",
    "framework": "pytorch",
    "version": "2.1.0",
    "agent_id": "550e8400-e29b-41d4-a716-446655440000",
    "training_dataset_ids": ["660e8400-e29b-41d4-a716-446655440000"]
}
headers = {
    "X-API-Key": "<api-key>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {'X-API-Key': '<api-key>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    name: 'fraud-detection-v2',
    hash: 'a1b2c3d4e5f6789012345678abcdef0123456789abcdef0123456789abcdef01',
    framework: 'pytorch',
    version: '2.1.0',
    agent_id: '550e8400-e29b-41d4-a716-446655440000',
    training_dataset_ids: ['660e8400-e29b-41d4-a716-446655440000']
  })
};

fetch('https://api.truthlocks.com/v1/models/attest', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.truthlocks.com/v1/models/attest",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'name' => 'fraud-detection-v2',
    'hash' => 'a1b2c3d4e5f6789012345678abcdef0123456789abcdef0123456789abcdef01',
    'framework' => 'pytorch',
    'version' => '2.1.0',
    'agent_id' => '550e8400-e29b-41d4-a716-446655440000',
    'training_dataset_ids' => [
        '660e8400-e29b-41d4-a716-446655440000'
    ]
  ]),
  CURLOPT_HTTPHEADER => [
    "Content-Type: application/json",
    "X-API-Key: <api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.truthlocks.com/v1/models/attest"

	payload := strings.NewReader("{\n  \"name\": \"fraud-detection-v2\",\n  \"hash\": \"a1b2c3d4e5f6789012345678abcdef0123456789abcdef0123456789abcdef01\",\n  \"framework\": \"pytorch\",\n  \"version\": \"2.1.0\",\n  \"agent_id\": \"550e8400-e29b-41d4-a716-446655440000\",\n  \"training_dataset_ids\": [\n    \"660e8400-e29b-41d4-a716-446655440000\"\n  ]\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("X-API-Key", "<api-key>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.truthlocks.com/v1/models/attest")
  .header("X-API-Key", "<api-key>")
  .header("Content-Type", "application/json")
  .body("{\n  \"name\": \"fraud-detection-v2\",\n  \"hash\": \"a1b2c3d4e5f6789012345678abcdef0123456789abcdef0123456789abcdef01\",\n  \"framework\": \"pytorch\",\n  \"version\": \"2.1.0\",\n  \"agent_id\": \"550e8400-e29b-41d4-a716-446655440000\",\n  \"training_dataset_ids\": [\n    \"660e8400-e29b-41d4-a716-446655440000\"\n  ]\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.truthlocks.com/v1/models/attest")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["X-API-Key"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"name\": \"fraud-detection-v2\",\n  \"hash\": \"a1b2c3d4e5f6789012345678abcdef0123456789abcdef0123456789abcdef01\",\n  \"framework\": \"pytorch\",\n  \"version\": \"2.1.0\",\n  \"agent_id\": \"550e8400-e29b-41d4-a716-446655440000\",\n  \"training_dataset_ids\": [\n    \"660e8400-e29b-41d4-a716-446655440000\"\n  ]\n}"

response = http.request(request)
puts response.read_body

{
  "model_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "receipt_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "name": "<string>",
  "hash": "<string>",
  "framework": "<string>",
  "version": "<string>",
  "agent_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "training_dataset_ids": [
    "3c90c3cc-0d44-4b50-8888-8dd25736052a"
  ],
  "created_at": "2023-11-07T05:31:56Z"
}

{
  "code": "AUTH_REQUIRED",
  "message": "Authentication required",
  "http_status": 401
}

{
  "code": "AUTH_REQUIRED",
  "message": "Authentication required",
  "http_status": 401
}

{
  "code": "AUTH_REQUIRED",
  "message": "Authentication required",
  "http_status": 401
}

Creates a cryptographically anchored attestation for an AI model. The attestation captures the model’s framework, training lineage, hyperparameters, and evaluation metrics. It is linked to the originating agent and anchored in the transparency log. Model attestations provide an auditable record of what was trained, how it was trained, and what data was used — enabling compliance teams and downstream consumers to verify model provenance before deployment.

Authentication

string

required

API key with models:write scope. Alternatively, pass a Bearer JWT token in the Authorization header.

string

required

Tenant identifier for multi-tenant isolation.

Request

string

required

MAIP agent identifier that trained or owns this model.

string

required

Human-readable model name. Must be unique within the agent’s namespace per version.

string

Semantic version of the model (e.g. 2.1.0). Defaults to 1.0.0 if omitted.

string

ML framework used to train the model. Accepted values: pytorch, tensorflow, onnx, custom.

string

SHA-256 hex digest of the serialized model weights. Used for integrity verification at deployment time.

string[]

Array of dataset attestation identifiers (maip-ds:ULID) used to train this model. Creates lineage edges automatically.

object

Key-value map of hyperparameters used during training (e.g. learning_rate, batch_size, epochs).

object

Key-value map of evaluation metrics (e.g. accuracy, f1_score, auc_roc).

Response

string

Unique model attestation identifier in MAIP format (maip-model:ULID).

string

The agent that attested this model.

string

Model name as provided in the request.

string

Resolved version of the model.

string

ML framework identifier.

string

SHA-256 hex digest stored for integrity verification.

string[]

Linked training dataset attestation identifiers.

string

Attestation status. Always attested on creation.

string

Transparency-log receipt anchoring this attestation.

string

ISO 8601 timestamp of creation.

Authorizations

X-API-Key

string

header

required

API key for machine-to-machine authentication

Body

application/json

name

string

required

Model name

hash

string

required

SHA-256 hash of the model weights

framework

string

required

ML framework (e.g. pytorch, tensorflow, onnx)

version

string

required

Model version string

agent_id

string<uuid>

required

Attesting agent

training_dataset_ids

string<uuid>[]

IDs of attested training datasets

Response

Model attested

model_id

string<uuid>

receipt_id

string<uuid>

name

string

hash

string

framework

string

version

string

agent_id

string<uuid>

training_dataset_ids

string<uuid>[]

created_at

string<date-time>

Attestations

Receipts

Risk Evaluation

Risk Signals

Account Takeover

Velocity Scoring

Verification

Verification Packs

Issuers

API Keys

Policies

Issuer Applications

Identity & Access

Webhooks

Audit & Logs

Consumer (B2C)

Billing

Machine Agents

Agent Sessions & Tools

Trust & Witness

Truth Claims & Documents

Compliance & Anomalies

Datasets & Models

Orchestrations & Workflows

Guardrails & Delegation

MAIP Policies

Observability

Assets

Governance

Announcements

Blog Management

Leads

System

Authentication

Request

Response

Authorizations

Body

Response

​Authentication

​Request

​Response

Authorizations

Body

Response

Authentication

Request

Response