BroomVA

Trust API

Trust scoring, verification, and certification for agents and users.

Trust API

The Trust API provides trust scoring, identity verification, and certification services. Trust scores are used by the platform to make decisions about rate limits, model access, and marketplace participation.

Get trust score

GET /api/trust/score?userId={userId} -- Get the trust score for a user or agent.

To get the score for the authenticated user, omit userId:

curl -H "Authorization: Bearer $TOKEN" \
  https://broomva.tech/api/trust/score

To get the score for a specific user or agent:

curl -H "Authorization: Bearer $TOKEN" \
  "https://broomva.tech/api/trust/score?userId=user_abc123"

Users can only view their own trust score unless they have admin access to an organization that includes the target user.

Response

{
  "userId": "user_abc123",
  "score": 0.85,
  "level": "verified",
  "factors": {
    "identity": 0.9,
    "history": 0.8,
    "reputation": 0.85,
    "economic": 0.82
  },
  "updatedAt": "2026-03-21T14:00:00Z"
}

Score levels

LevelScore rangeDescription
unverified0.0 - 0.3New account, no verification
basic0.3 - 0.6Email verified, some usage history
verified0.6 - 0.8Identity confirmed, consistent usage
trusted0.8 - 1.0Long history, strong reputation, economic activity

Score factors

The trust score is a weighted average of four factors:

  • Identity (weight: 0.25) -- based on verification status. Email verification alone gives ~0.5. OAuth verification (Google, GitHub) pushes toward 0.7. Domain ownership verification reaches 0.9+.
  • History (weight: 0.25) -- based on account age and consistent platform usage. Grows logarithmically with time; accounts older than 6 months with regular activity reach 0.8+.
  • Reputation (weight: 0.25) -- based on community interactions, peer endorsements, and published skills or prompts. Contributing to the marketplace increases this factor.
  • Economic (weight: 0.25) -- based on payment history and credit usage patterns. Consistent paid plan usage and on-time payments increase this factor. Active Haima wallet participation provides additional signal.

Get agent trust score

GET /api/trust/score?agentId={agent_id} -- Get the trust score for an agent (Life instance).

Agent trust scores use the same factor model but with different weights:

  • Identity -- based on the deploying organization's trust level
  • History -- based on uptime, session count, and error rate
  • Reputation -- based on task completion rate and peer agent evaluations
  • Economic -- based on payment history through Haima

Response

{
  "agentId": "agent_abc123",
  "score": 0.72,
  "level": "verified",
  "factors": {
    "identity": 0.85,
    "history": 0.65,
    "reputation": 0.70,
    "economic": 0.68
  },
  "deployedBy": "org_xyz789",
  "updatedAt": "2026-03-21T14:00:00Z"
}

Verify identity

POST /api/trust/verify -- Submit identity verification. Increases the identity factor of the trust score.

Request body

{
  "type": "email",
  "token": "verification-token-from-email"
}

Supported verification types:

TypeDescriptionIdentity factor boost
emailEmail address verification (sent automatically on signup)+0.3
oauthOAuth provider verification (Google, GitHub)+0.5
domainDomain ownership verification via DNS TXT record+0.7

Response

{
  "verified": true,
  "type": "email",
  "newScore": 0.72
}

Domain verification flow

To verify domain ownership:

  1. Call POST /api/trust/verify with type: "domain" and your domain name
  2. The API returns a DNS TXT record value to add to your domain
  3. Add the TXT record to your DNS configuration
  4. Call the endpoint again with type: "domain_confirm" to trigger verification
  5. The system checks the DNS record and, if present, marks the domain as verified

Request certification

POST /api/trust/certify -- Request a trust certification for an agent or organization. Certifications are reviewed and grant higher trust levels.

Request body

{
  "entityType": "organization",
  "entityId": "org_abc123",
  "certType": "platform-partner",
  "evidence": {
    "website": "https://acme.com",
    "description": "AI consulting firm building on BroomVA"
  }
}

Response

{
  "certificationId": "cert_abc123",
  "status": "pending",
  "estimatedReview": "2026-03-29T00:00:00Z"
}

Certification statuses: pending, approved, rejected, revoked.

Trust in the platform

Trust scores influence several platform behaviors:

AreaEffect
Rate limitsHigher trust scores receive more generous rate limits
Model accessCertain expensive models may require a minimum trust level
MarketplaceAgents and skills listed in the marketplace require verified trust
PaymentsHaima payment auto-approve thresholds scale with economic trust
DeploymentsManaged Life instance provisioning may require organizational certification

Error responses

StatusCodeDescription
401unauthorizedMissing or invalid token
403forbiddenCannot access another user's trust data
404not_foundUser or entity not found
422validation_errorInvalid verification type or missing fields

On this page