Verify a Patina attestation
verify_attestationCheck whether a Patina attestation really was signed by Patina. Every Patina score ships with an EIP-191 signed message; hand this tool that message and signature and it returns the address it recovered, the address Patina publishes, and whether the two match. IMPORTANT, AND THE WHOLE POINT: you do not need this tool, and where you can, you should not use it. A signature is worth something precisely because ANYONE can check it offline, with no call to Patina, using viem's recoverMessageAddress or ethers' verifyMessage. If you ask Patina's own server whether Patina's own signature is good, you are trusting Patina again and the signature has bought you nothing. That is why this returns the recovered address rather than a bare yes: compare it yourself. Attestations also EXPIRE: the message carries an expiresAt line inside the signed bytes, and a genuine signature past that date means the score was true when issued and should be fetched again, not that anybody forged anything.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| message | Yes | The exact `message` string from the attestation, newlines and all. | |
| signature | Yes | The `signature` from the attestation, 0x-prefixed. |