Integration guide

Verification Provider Integration

The Claw can call your verification endpoint during /theclaw register so your service decides whether a member token should be accepted.

Discord command

Command Preview

Share this exact command with members:

Discord

/theclaw register access_token:YOUR_ACCESS_TOKEN

Request format

Expected Request

The Claw sends a signed POST to your endpoint:

HTTP

POST /verify
Content-Type: application/json
X-Timestamp: 1700000000
X-Signature: <hmac_sha256_hex(raw_body, shared_secret)>

{"access_token":"token","discord_user_id":"353750360151687169","guild_id":"1465828371576393784"}

Response format

Expected Response

Return HTTP 200 with one of:

JSON

{"access": true, "reason": "license_active"}
{"access": false, "reason": "license_missing_or_expired"}

Default behavior

What Happens When Things Go Wrong

Deny on failure If your endpoint is unreachable or returns an error, the member is denied.

5-second timeout Requests that take longer are treated as failures.

5-minute cache Results are cached before re-checking your endpoint.

Machine contract API reference Getting started