Know who's calling
your API

import { NervePay } from '@nervepay/sdk';

const nervepay = new NervePay({ apiKey: process.env.NERVEPAY_API_KEY });

export async function verifyAgent(req: Request) {
  // Verify the agent's identity
  const result = await nervepay.verify({
    did: req.headers.get('Agent-DID'),
    signature: req.headers.get('X-Agent-Signature'),
    nonce: req.headers.get('X-Agent-Nonce'),
    timestamp: req.headers.get('X-Signature-Timestamp'),
    minReputation: 60, // Require minimum reputation
  });

  if (!result.valid) {
    return { allowed: false, reason: result.error };
  }

  // Access verified agent data
  return {
    allowed: true,
    agent: {
      did: result.agent.did,
      name: result.agent.name,
      reputation: result.agent.reputation_score,
      riskLevel: result.risk_assessment,
    }
  };
}