check_receipt_revoked
Single-item revocation lookup per Receipt Format v1.0 §8.2. Verifiers that
do not want to maintain a local mirror of /.well-known/receipt-revocations.json
call this endpoint instead. The response includes feed_version for cache
coherence.
Use this tool when:
You are verifying a receipt and need to confirm its
signature.key_idis still trusted.You are verifying a receipt and need to confirm the specific
receipt_idwas not retracted by its issuer.You hold receipts long-term and want to recheck trust before acting on them.
Do NOT use this tool when:
You want the full revocation set — fetch
/.well-known/receipt-revocations.jsondirectly.You want to publish a revocation — that is operator-controlled and not exposed via this API.
Inputs:
key_id(query, optional): Receipt-format key_id (e.g.,tm-receipt-2026-05). Provide one ofkey_idorid.id(query, optional): UUIDv7 of a specific receipt. Provide one ofkey_idorid.
Returns:
revoked: boolean.When revoked:
revoked_at(ISO 8601),reason(human-readable),replacement_key_id(for keys).Always:
checked_at(ISO 8601),feed_version(integer).
Cost:
Free; rate-limited like the rest of the data API. Edge-cached 60s.
Latency:
Typical <100ms (warm cache); p99 <500ms (cold fetch from well-known).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| id | No | UUIDv7 of a specific receipt to check. | |
| key_id | No | Receipt-format signing key_id to check. |