Api Endpoint

iotwerk_device_auth

Canonicalizes device_id, nonce and message, computes an HMAC-SHA256 tag with caller-supplied ephemeral key material, and optionally compares a claimed tag in constant time. It does not provision devices, store keys or replace asymmetric device identity; do not submit long-lived production secrets.

Open interactive test console

Offering

Provider
iot.halowerk.com
Method
POST
Offering type
Api Endpoint
Transport type
http
Category
Security
Delivery
Not provided
Pricing model
Not provided
x402 version
2

Endpoint context

URL
https://iot.halowerk.com/v1/device-auth
MIME type
application/json
First seen
2026-10-16T01:57:40.935Z
Last seen
Tags
iot, Security, HMAC

Payment pricing

x402 payment terms are the authoritative price for calling this endpoint.

Payment option 1
0.002 USDC
Atomic price: 2000 · Network: eip155:8453 · Asset: USDC · Scheme: exact
Raw x402 terms
[
  {
    "scheme": "exact",
    "network": "eip155:8453",
    "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
    "amount": "2000",
    "payTo": "0x2880EdfFF13100677Bf97A3CBdF3Bc34771C4E5E"
  }
]

Observed health

Status
Healthy
Latest latency
315 ms
Average latency
409 ms
HTTP status
204
Last checked
Reachability
100% over 10 checks

Latency is measured to the first response headers. A reachable result does not verify response accuracy or merchant identity.

Input schema

{
  "type": "object",
  "properties": {
    "type": {
      "type": "string",
      "const": "http"
    },
    "method": {
      "type": "string",
      "enum": [
        "POST",
        "PUT",
        "PATCH"
      ]
    },
    "bodyType": {
      "type": "string",
      "enum": [
        "json",
        "form-data",
        "text"
      ]
    },
    "body": {
      "type": "object",
      "required": [
        "device_id",
        "nonce",
        "message",
        "ephemeral_key"
      ],
      "additionalProperties": false,
      "properties": {
        "device_id": {
          "type": "string",
          "minLength": 1,
          "maxLength": 128,
          "description": "Stable device identifier."
        },
        "nonce": {
          "type": "string",
          "minLength": 8,
          "maxLength": 256,
          "description": "Fresh caller-generated challenge nonce."
        },
        "message": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096,
          "description": "Challenge payload."
        },
        "ephemeral_key": {
          "type": "string",
          "minLength": 16,
          "maxLength": 512,
          "description": "Ephemeral HMAC key; long-lived production keys must not be sent."
        },
        "claimed_tag_hex": {
          "type": "string",
          "pattern": "^[0-9a-fA-F]{64}$"
        }
      }
    }
  },
  "required": [
    "type",
    "method",
    "bodyType",
    "body"
  ],
  "additionalProperties": false
}

Output schema

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "additionalProperties": true,
  "properties": {
    "input": {
      "additionalProperties": true,
      "properties": {
        "bodyType": {
          "const": "json"
        },
        "exampleUrl": {
          "format": "uri",
          "type": "string"
        },
        "method": {
          "const": "POST"
        },
        "schemaUrl": {
          "format": "uri",
          "type": "string"
        },
        "type": {
          "const": "http"
        }
      },
      "required": [
        "type",
        "method",
        "bodyType"
      ],
      "type": "object"
    },
    "output": {
      "additionalProperties": true,
      "properties": {
        "exampleUrl": {
          "format": "uri",
          "type": "string"
        },
        "schemaUrl": {
          "format": "uri",
          "type": "string"
        },
        "type": {
          "const": "json"
        }
      },
      "required": [
        "type"
      ],
      "type": "object"
    }
  },
  "required": [
    "input"
  ],
  "type": "object"
}