Rightshold

{"properties":{"api_key":{"deprecated":true,"description":"Deprecated: use Authorization: Bearer <key>. With a key the assessment is kept in your account.","type":"string"},"intended_use":{"additionalProperties":false,"description":"IntendedUses useto check: everyeach true flag is a right the check must findbe documented; omitted flags are= false; unknown fields are refused. For instance {\"commercial_use\":true,\"deployment\":true,\"attribution_planned\":true,\"duration_days\":365}","properties":{"attribution_planned":{"type" ⟨63 unchanged words⟩ },"type":"object"},"resource_id":{"description":"Registered resource id","type":"string"}},"required":[" ⟨4 unchanged words⟩ 

{"properties":{"author":{"description":"Creator","type":"string"},"changes":{"description":"What you changed","type":["string","boolean"]},"license":{"description":"SPDX id","type":"string"},"source_url":{"description":"Where it came from","type":"string"},"title":{"description":"Work title","type":"string"}},"required":[" ⟨3 unchanged words⟩ 

{"properties":{"intended_use":{"additionalProperties":false,"description":"IntendedUses useto check: everyeach true flag is a right the check must findbe documented; omitted flags are= false; unknown fields are refused. For instance {\"commercial_use\":true,\"deployment\":true,\"attribution_planned\":true,\"duration_days\":365}","properties":{"attribution_planned":{"type" ⟨107 unchanged words⟩ 

{"properties":{"hash":{"description":"SHA-256 of the package","type":"string"},"slug":{"description":"Store slug","type":"string"},"url":{"description":"Listing or repo URL","type":"string"}},"type":"object"}

{"properties":{"api_key":{"deprecated":true,"description":"Deprecated: use Authorization: Bearer <key>. With a key the assessment is kept in your account.","type":"string"},"intended_use":{"additionalProperties":false,"description":"IntendedUses useto check: everyeach true flag is a right the check must findbe documented; omitted flags are= false; unknown fields are refused. For instance {\"commercial_use\":true,\"deployment\":true,\"attribution_planned\":true,\"duration_days\":365}","properties":{"attribution_planned":{"type" ⟨66 unchanged words⟩ "items":{"properties":{"asset":{"description":"URL or name","type":"string"},"intended_use":{"additionalProperties":false,"description":"IntendedUses useto check: everyeach true flag is a right the check must findbe documented; omitted flags are= false; unknown fields are refused. For instance {\"commercial_use\":true,\"deployment\":true,\"attribution_planned\":true,\"duration_days\":365}","properties":{"attribution_planned":{"type" ⟨63 unchanged words⟩ ,"type":"object"},"license":{"description":"SPDX id","type":"string"},"ref":{"description":"Your label","type":"string"},"resource_id":{"type ⟨11 unchanged words⟩ 

{"properties":{"agent":{"description":"Or RS number/handle","type":"string"},"asset_sha256":{"description":"Uploaded file hash","type":"string"},"clearance":{"type" ⟨2 unchanged words⟩ {"type":"string"},"kya_token":{"description":"Agent RS-KYA token","type":"string"},"policy":{"description":"Gate policy","type":"object"},"receipt":{"description":"Rights Receipt","type":"object"},"request":{"description ⟨23 unchanged words⟩ 

 ⟨40 unchanged words⟩ "intended_use":{"additionalProperties":false,"description":"IntendedUses useto check: everyeach true flag is a right the check must findbe documented; omitted flags are= false; unknown fields are refused. For instance {\"commercial_use\":true,\"deployment\":true,\"attribution_planned\":true,\"duration_days\":365}","properties":{"attribution_planned":{"type" ⟨66 unchanged words⟩ "items":{"properties":{"asset":{"description":"URL or name","type":"string"},"intended_use":{"description" ⟨7 unchanged words⟩ ,"type":"object"},"license":{"description":"SPDX id","type":"string"},"ref":{"description":"Your label","type":"string"},"resource_id":{"type ⟨15 unchanged words⟩ 

 ⟨18 unchanged words⟩ ,"type":"string"},"asset":{"description":"The file","properties":{"kind":{"enum":["image ⟨12 unchanged words⟩ {"type":"string"},"sha256":{"description":"64-hex SHA-256","type":"string"},"source_url":{"type" ⟨30 unchanged words⟩ ,"type":"string"},"intended_use":{"description":"Same shape as check_license","type":"object"},"license":{"description":"SPDX id","type":"string"},"resource_id":{"type ⟨8 unchanged words⟩ 

 ⟨10 unchanged words⟩ ,"type":"string"},"credential":{"description":"Return the signed credential","type":"boolean"}},"required":["agent ⟨2 unchanged words⟩ 

{"properties":{"credential":{"description":"Or a credential","type":"object"},"signature":{"description":"Credential signature","type":"string"},"token":{"description":"RS-KYA token","type":"string"}},"type":"object"}

{"properties":{"intended_use":{"additionalProperties":false,"description":"IntendedUses useto check: everyeach true flag is a right the check must findbe documented; omitted flags are= false; unknown fields are refused. For instance {\"commercial_use\":true,\"deployment\":true,\"attribution_planned\":true,\"duration_days\":365}","properties":{"attribution_planned":{"type" ⟨63 unchanged words⟩ },"type":"object"},"licenses":{"description":"SPDX ids","items":{"type":"string"},"maxItems ⟨9 unchanged words⟩ 

{"properties":{"history":{"description":"Include ledger history","type":"boolean"},"query":{"description":"RS number, handle or name","type":"string"}},"required":[" ⟨3 unchanged words⟩ 

{"properties":{"query":{"description":"Search text","maxLength":200,"type":"string"},"type ⟨7 unchanged words⟩ 

 ⟨47 unchanged words⟩ ,"type":"object"},"display_name":{"description":"Account name","type":"string"},"email":{"description":"Optional","type":"string"},"kind":{"enum ⟨28 unchanged words⟩ 

{"properties":{"contact":{"description":"Optional reply address","maxLength":320,"type":"string"},"ease ⟨14 unchanged words⟩ ,"type":"string"},"satisfaction":{"description":"1-5","maximum":5,"minimum":1,"type":" ⟨12 unchanged words⟩ ],"type":"string"},"what_would_improve":{"description":"Free text","maxLength":2000,"type":"string"}}, ⟨5 unchanged words⟩ 

 ⟨11 unchanged words⟩ ,"type":"string"},"manifest":{"description":"Manifest as issued","type":"object"},"signature":{"description":"Its signature","type":"string"}},"required":[" ⟨4 unchanged words⟩ 

{"properties":{"api_key":{"deprecated":true,"description":"OptionalDeprecated: your Rightshold API key, so the assessmentuse isAuthorization: keptBearer in<key>. yourWith owna accountkey (otherwisethe itassessment is kept in the public workspace). Not needed if your MCP client sends Authorization: Bearer <key>.account.","type":"string"},"intended_use":{ ⟨114 unchanged words⟩ 

{"properties":{"api_key":{"deprecated":true,"description":"OptionalDeprecated: your Rightshold API key, so the assessmentuse isAuthorization: keptBearer in<key>. yourWith owna accountkey (otherwisethe itassessment is kept in the public workspace). Not needed if your MCP client sends Authorization: Bearer <key>.account.","type":"string"},"intended_use":{ ⟨238 unchanged words⟩ 

{"properties":{"api_key":{"deprecated":true,"description":"Your Rightshold API key (rs_...). Only needed ifDeprecated: youruse MCPAuthorization: clientBearer cannot<key> send(arguments Authorization:can Bearerreach <key>.transcripts).","type":"string"},"client":{ ⟨169 unchanged words⟩ 

 ⟨2 unchanged words⟩ {"type":"string"},"api_key":{"deprecated":true,"description":"Your Rightshold API key (rs_...). Only needed ifDeprecated: youruse MCPAuthorization: clientBearer cannot<key> send(arguments Authorization:can Bearerreach <key>.transcripts).","type":"string"},"asset":{ ⟨71 unchanged words⟩ 

 ⟨13 unchanged words⟩  not create. Checks one license (any SPDX License List id; curated readings for the common ones, needs_review ⟨7 unchanged words⟩  GitHub, Hugging Face, npm, PyPI, Wikimedia Commons, Unsplash or Pexels page declares (source_url), ⟨5 unchanged words⟩  permitted, prohibited, needs_review or not_documented, with duties and an uncertainty block (what the duties.verdict leaves open; whether a human must review). Free, no key. Call with {"license" ⟨7 unchanged words⟩ 

{"properties":{"intended_use":{"additionalProperties":false,"description":"Intended use.use: Everyevery true flag is a right the assessmentcheck must find documented; omitted flags are false.false; Unknownunknown fields are refused (invalid_intended_use).refused. For instance {\"commercial_use\":true,\"deployment\ ⟨76 unchanged words⟩ :{"description":"SPDX id, e.g. CC-BY-NC-4.0 or Apache-2.0 (any SPDX License List id; uncurated onesids answer needs_review)","type":"string"}, ⟨30 unchanged words⟩ 

 ⟨18 unchanged words⟩ "type":["object","null"]},"uncertainty":{"type":"object"},"uses_evaluated":{"items":{"type":"string" ⟨13 unchanged words⟩ 

 ⟨6 unchanged words⟩  third-party assets. Checks up to 100 items (a licensean SPDX id, a registered resource_id, or an ⟨18 unchanged words⟩ allowed, blocked, needs_review or insufficient_evidence, with reasons, duties and next steps.duties. Free, no key. Call with {"intended_use" ⟨12 unchanged words⟩ 

 ⟨39 unchanged words⟩ ":{"additionalProperties":false,"description":"Intended use.use: Everyevery true flag is a right the assessmentcheck must find documented; omitted flags are false.false; Unknownunknown fields are refused (invalid_intended_use).refused. For instance {\"commercial_use\":true,\"deployment\ ⟨82 unchanged words⟩ ":{"additionalProperties":false,"description":"Intended use.use: Everyevery true flag is a right the assessmentcheck must find documented; omitted flags are false.false; Unknownunknown fields are refused (invalid_intended_use).refused. For instance {\"commercial_use\":true,\"deployment\ ⟨94 unchanged words⟩ 

 ⟨46 unchanged words⟩ ":{"additionalProperties":false,"description":"Intended use.use: Everyevery true flag is a right the assessmentcheck must find documented; omitted flags are false.false; Unknownunknown fields are refused (invalid_intended_use).refused. For instance {\"commercial_use\":true,\"deployment\ ⟨115 unchanged words⟩ 

{"properties":{"intended_use":{"additionalProperties":false,"description":"Intended use.use: Everyevery true flag is a right the assessmentcheck must find documented; omitted flags are false.false; Unknownunknown fields are refused (invalid_intended_use).refused. For instance {\"commercial_use\":true,\"deployment\ ⟨89 unchanged words⟩ 

Call when you reuse material that requires credit. Returns a readythe attribution line the license asks for (text, markdown, html) for the license, with the duties it does and does not covercovers and what is still missing. Free, no key. Call with {" ⟨13 unchanged words⟩ 

{"properties":{"missing":{"items":{"type":"string"},"type":"array"},"required":{"type":"boolean"},"text":{"type":"string"}},"required":["license","required","text"],"type":"object"}

 ⟨8 unchanged words⟩ , font or model you did not create. Free, no key. What a license fromChecks theone license library (CC0, CC BY/SA/NC/ND 4.0, MIT, Apache-2.0, BSD, ISC, GPL/LGPL/AGPLany 3.0,SPDX MPL-2.0,License Unlicense,List OFL-1.1,id; ODbL,curated ODC-By,readings PDDL,for CDLA-Permissive-2.0)the permits,common prohibitsones, leavesneeds_review for humanthe reviewrest) or does not document, for the intended uselicense youa giveGitHub, with the duties that come with it. Any other SPDX License ListHugging idFace, answersnpm, needs_reviewPyPI, withWikimedia theCommons, officialUnsplash link.or OrPexels passpage source_urldeclares (GitHub reposource_url), Hugging Face modelfor card,your npmintended oruse. PyPIReturns packagepermitted, Wikimedia Commons fileprohibited, Unsplashneeds_review or Pexels photo) tonot_documented, checkwith the licenseduties. thatFree, sourceno declares.key. Call with {"license": "CC-BY-4.0",  ⟨6 unchanged words⟩ 

{"properties":{"duties":{"items":{"type":"string"},"type":"array"},"findings":{"type":"array"},"license":{"properties":{"id":{"type":"string"},"reference_hash":{"type":"string"}},"type":["object","null"]},"uses_evaluated":{"items":{"type":"string"},"type":"array"},"verdict":{"enum":["permitted","prohibited","needs_review","not_documented"]}},"required":["verdict","findings"],"type":"object"}

Call before shipping anything that bundles third-party assets: clears up to 100 at once. Free, no key.assets. CheckChecks up to 100 inputsitems (each a registeredlicense resource_idSPDX id, a license SPDXregistered idresource_id, or an asset URL or name) for their intended uses in one call.uses; Licenseslicenses your account holds are reused first. Each item returnsanswers allowed, blocked, needs_review or insufficient_evidence, with reasons, duties and next steps. Free, no key. Call with {"intended_use": {"commercial_use": ⟨11 unchanged words⟩ 

{"properties":{"items":{"items":{"properties":{"answer":{"enum":["allowed","blocked","needs_review","insufficient_evidence"]},"duties":{"items":{"type":"string"},"type":"array"}},"required":["ref","answer"],"type":"object"},"type":"array"},"summary":{"properties":{"all_clear":{"type":"boolean"}},"required":["total","all_clear"],"type":"object"}},"required":["items","summary"],"type":"object"}

CheckUse everywhen third-partyyour inputprincipal ofwants asigned deliverableproof (images,for fonts,a data,whole codedeliverable: bychecks every third-party input (resource_id, license or asset) for its intended use, reusing licenses you hold, and getreturns a signed, ledger-committed manifest plus a plain-text summary to ship with the work. Its hash is committed to the ledger; anyone can verifysummary; itverify_rights_manifest withchecks verify_rights_manifest.it. Call with {"title": "Spring campaign" ⟨4 unchanged words⟩ ref": "font", "license": "OFL-1.1"}, {"ref": "code", "license": "MIT"}]}.

 ⟨25 unchanged words⟩ ,"deliverable":{"type":"object"},"idempotency_key":{"description":"Optional: a retry with the same key returns the first proof.","maxLength":255,"type":"string"},"intended_use":{"additionalProperties":false,"description":"Intended ⟨108 unchanged words⟩ {"type":"string"},"intended_use":{"additionalProperties":false,"description":"Intended use. Every true flag is a right the assessment must find documented; omitted flags are false. Unknown fields are refused (invalid_intended_use). For instance {\"commercial_use\":true,\"deployment\":true,\"attribution_planned\":true,\"duration_days\":365}","properties":{"attribution_planned":{"type":"boolean"},"commercial_use":{"type":"boolean"},"deployment":{"type":"boolean"},"duration_days":{"description":"Whole days of use (1 to 36500), or null for noOptional fixedper-item term","maximum":36500,"minimum":1,"type":["integer","null"]}override,"geography":{"description":"worldwide (default) or a region codesame suchshape as US, EU, UK","maxLength":32,"minLength":1,"type":"string"},"model_inference":{"type":"boolean"},"model_training":{"type":"boolean"},"modification":{"type":"boolean"},"redistribution":{"type":"boolean"},"sublicensing":{"type":"booleanintended_use"}},"type":"object"},"license":{"

 ⟨11 unchanged words⟩ media under different licenses. Checks 2-25 SPDX ids against each other for your intended use (default: redistribution) and returns: compatible, needs_review or incompatible, with the reason for everyeach pair, the combined duties and which license governs the result.governs. Free, no key. Call with {"licenses" ⟨9 unchanged words⟩ 

{"properties":{"combined_duties":{"items":{"type":"string"},"type":"array"},"pairs":{"items":{"properties":{"verdict":{"enum":["compatible","needs_review","conflict"]}},"type":"object"},"type":"array"},"verdict":{"enum":["compatible","needs_review","incompatible"]}},"required":["verdict","pairs"],"type":"object"}

 ⟨12 unchanged words⟩ /mcp?toolset=<name>[,<name>] (or toolset=all) to list them;them. everyMost toolclients canonly beoffer calledyou whateverthe istools listed.they listed, so connect with the set your task needs.

CreateUse when your principal wants a tenantRightshold account: one call creates it and geta anfree API key (shown once). Email is optional; without one the account is, pseudonymous.email Setoptional. sandboxaccept_terms:true for an isolated rs_test_ key thatmeans cannotthe inflateaccount liveholder statsagrees orto the live ledger.terms One-callat onboarding:/terms. passAdd agent {handle, display_name, headline?, skills?, public_key_pem?} and the same call alsoto createsregister theyour agent profile and its registration, returning agent_id and kya_level 0 —in the key works immediately, no secondsame call needed.(KYA IfL0); theif agentthat block failsis validation,invalid nothing is created. Rightshold records every API and MCP call madeThe withresult thiscarries accountready-to-paste orconnector itssettings. agentssandbox: client IP address, network prefix, usertrue agent,gives operation,an declaredisolated intent,rs_test_ outcome,key. andCalls timing,made pluswith agent-to-agentthe interactions.account Thisare activityrecorded buildsfor due-diligence reports and bureau grades; it is visible to you and to Rightshold's bureau, never published, and retained for a limited period. See(see /privacy./privacy).

Call first if you are new to Rightshold. ReturnsWith the{} threeit callsreturns mostthe agentsfive needjobs (noRightshold APIdoes, keyeach needed),as thea freeready limitscall, plus how to getconnect. aAdd free{"license": key"CC-BY-NC-4.0", in"use": one"commercial_use"} callor without{"question": email,"Can I train a model on MIT code?"} and wherethe tosame verifycall Rightsholdanswers itself.it. Free, no key.

{"properties":{"license":{"description":"Optional: an SPDX id to check right away, e.g. CC-BY-NC-4.0","type":"string"},"question":{"description":"Optional: a rights question in plain English, answered in the same call","maxLength":500,"type":"string"},"use":{"description":"Optional: the use to check the license for (default commercial_use)","enum":["commercial_use","redistribution","modification","sublicensing","deployment","model_training","model_inference"],"type":"string"}},"type":"object"}

 ⟨9 unchanged words⟩ and confirm its hash was recorded on the ledger.ledger; with deliverable_sha256, also that it covers those exact bytes. A valid manifest shows what was answered and ⟨7 unchanged words⟩ 

{"properties":{"deliverable_sha256":{"description":"Optional: the SHA-256 of the deliverable you received","type":"string"},"manifest":{"type":"object"},"signature" ⟨7 unchanged words⟩ 

{"properties":{"cleared":{"type":"boolean"},"environment":{"enum":["live","sandbox","not_stated"]},"reasons":{"items":{"type":"string"},"type":"array"},"valid":{"type":"boolean"}},"required":["valid","cleared","reasons"],"type":"object"}

Call before trusting, paying or hiring an agent you have not worked with. Free, no key. Look up an agent by registration number (RS-XXXX-XXXX ⟨27 unchanged words⟩