Skip to content

Attestation routes

Every Attestation Verb as an api.sb route, with its inputs, result, refusals and an example.

Reference for Attestation.

Attestation.create

Creates an Attestation. Verb page.

Text
POST /{namespace}/attestations

Body, as JSON: the inputs. Emits Attestation.created.

Inputs

InputTypeRequiredDescription
outcomestringrequiredOne of performed or declined.
signedAtdatetimerequiredWhen the Worker signed it.
reservedActReserved ActThe Reserved Act the Attestation records as performed or declined.
credentialCredentialThe Credential the signing Worker held when it signed.

Returns

OutputTypeRequiredDescription
attestationAttestationrequiredThe Attestation.

Refuses when

CheckErrorFixThen call
The key is valid, but its scopes do not allow this operation.forbiddenUse a key whose scopes cover the operation, or ask an owner of the namespace to grant them.None.

Example

Terminal
curl -X POST https://api.sb/tutorloop.com/attestations \
  -H "Authorization: Bearer $STARTUP_BUILDER_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"outcome":"performed","signedAt":"2026-10-22T12:00:00Z"}'
JSON
{
  "api": "https://api.sb/tutorloop.com",
  "attestation": {
    "$id": "https://api.sb/tutorloop.com/attestations/attestation_reixEU2HGB",
    "$type": "Attestation",
    "outcome": "performed",
    "signedAt": "2026-10-22T12:00:00Z"
  },
  "action": {
    "$id": "https://api.sb/tutorloop.com/actions/act_DEVhiF6mF5",
    "operation": "Attestation.create",
    "status": "done"
  },
  "links": {
    "self": "https://api.sb/tutorloop.com/actions/act_DEVhiF6mF5"
  }
}

Attestation.get

Returns one Attestation by id. Verb page.

Text
GET /{namespace}/attestations/{id}

Path: id. Query: the other inputs. Reads only: it emits no Event.

Inputs

InputTypeRequiredDescription
idstringrequiredThe id of the Attestation.
atstringA time or Version name: the record as it stood then. Unset: as it stands now.

Returns

OutputTypeRequiredDescription
attestationAttestationrequiredThe Attestation.

Refuses when

CheckErrorFixThen call
The key is valid, but its scopes do not allow this operation.forbiddenUse a key whose scopes cover the operation, or ask an owner of the namespace to grant them.None.

Example

Terminal
curl https://api.sb/tutorloop.com/attestations/attestation_reixEU2HGB \
  -H "Authorization: Bearer $STARTUP_BUILDER_API_KEY"
JSON
{
  "api": "https://api.sb/tutorloop.com",
  "$type": "Attestation",
  "$id": "https://api.sb/tutorloop.com/attestations/attestation_reixEU2HGB",
  "attestation": {
    "$id": "https://api.sb/tutorloop.com/attestations/attestation_reixEU2HGB",
    "$type": "Attestation",
    "outcome": "performed",
    "signedAt": "2026-10-22T12:00:00Z"
  },
  "links": {
    "self": "https://api.sb/tutorloop.com/attestations/attestation_reixEU2HGB",
    "up": "https://api.sb/tutorloop.com/attestations"
  }
}

Attestation.list

Returns Attestations, newest first, one page at a time. Verb page.

Text
GET /{namespace}/attestations

Query: the inputs. Reads only: it emits no Event.

Inputs

InputTypeRequiredDescription
limitintegerAt most this many records, up to 100. The default is 20.
afterstringThe cursor from the previous page.
wherestringA filter over the properties, such as paidAt = null and total.amount > 500.
sortstringProperties to sort by, comma-separated; a leading minus sorts descending.
totalbooleanTrue adds the match count as meta.total, exact up to 10,000 matches and estimated above.
facetsstringProperties to count by value, comma-separated, returned as meta.facets.
fieldsstringProperties to return on each record, comma-separated; $id and $type always return.
includestringRelated records to embed in place of their URLs, comma-separated.
depthintegerHow many levels of related records to embed. The default is 1.
qstringWords to match across the text properties, ranked by relevance.
matchstringRanks the search by words, or meaning; words is the default.

Returns

OutputTypeRequiredDescription
attestationslist of AttestationrequiredOne page of Attestations.

Refuses when

CheckErrorFixThen call
The key is valid, but its scopes do not allow this operation.forbiddenUse a key whose scopes cover the operation, or ask an owner of the namespace to grant them.None.

Example

Terminal
curl "https://api.sb/tutorloop.com/attestations?limit=20" \
  -H "Authorization: Bearer $STARTUP_BUILDER_API_KEY"
JSON
{
  "api": "https://api.sb/tutorloop.com",
  "$type": "Attestation",
  "attestations": [
    {
      "$id": "https://api.sb/tutorloop.com/attestations/attestation_reixEU2HGB",
      "$type": "Attestation",
      "outcome": "performed",
      "signedAt": "2026-10-22T12:00:00Z"
    }
  ],
  "meta": {
    "limit": 20,
    "after": "attestation_reixEU2HGB"
  },
  "links": {
    "self": "https://api.sb/tutorloop.com/attestations?limit=20",
    "next": "https://api.sb/tutorloop.com/attestations?after=attestation_reixEU2HGB"
  }
}