Legal
Last updated 2026-09-15. Attesto is a hackathon build (Crypto World's Fair, Colosseum) running against Solana devnet, not a production financial service.
1. What Attesto is
Attesto is a paid software service: an API that computes and returns a skill-check score for a given Solana address, sourced from Prova's public on-chain attestation registry, and writes its own proof-of-fulfillment attestation on-chain for every request it serves. Attesto sells its own computation — the score and the attestation — not a financial service.
2. Attesto does not intermediate a payment
Every request settles atomically: the caller sends USDC directly on-chain to the address quoted in the 402 response, confirms the transaction themselves, and Attesto verifies that confirmed transaction directly against Solana RPC before releasing a result. Attesto never accrues or reports a running balance for any caller, never routes a payment through a third-party facilitator, and never settles or reconciles a transfer on behalf of another party. Each skill-check is a self-contained, one-off transaction, not a standing account relationship.
3. Attestation data and no warranty
Skill-check scores are derived from Prova's on-chain attestation registry (a separate product, separate program) plus Attesto's own scoring formula, published in full in the project's DECISIONS.md. Both the underlying attestations and Attesto's own fulfillment receipts are independently resolvable on-chain — you do not have to trust Attesto's word for the result. Attesto is provided on an as-is basis, without warranty of any kind, and makes no representation that a given score reflects real-world trustworthiness or fitness for any particular purpose.
4. Restricted jurisdictions
Attesto is not offered to, and may not be used by, any person or entity located in, or paying on behalf of anyone located in: Cuba, Iran, North Korea, Syria, the Russian-occupied regions of Ukraine (Crimea, Donetsk, Luhansk), or mainland China, consistent with OFAC-sanctioned-jurisdiction practice and Chinese financial-authority notices on crypto-asset activity.
The European Union/EEA and United States are not blocked, but are flagged pending further legal review of how region-specific frameworks (e.g. MiCA, U.S. state money-transmission rules) apply to a pay-per-request on-chain oracle like this one.
IP-based geo-blocking on an API that autonomous agents call directly is inherently weaker than the same technique in front of a human browser flow, so enforcement here is layered: a technical check plus the self-certification checkbox shown before payment in the “Try it” flow. Checking that box is a representation you are making, not a formality.
5. Not legal or financial advice
Nothing on this site or returned by the API is legal, financial, or investment advice. This is a hackathon submission; treat any devnet activity, pricing, or on-chain state accordingly.
6. Contact
Questions about this page or the product itself: open an issue on GitHub.