{"ok":true,"data":{"version":"2026-02-26","summary":"Server owners can configure a verification endpoint to decide whether /theclaw register access tokens are accepted.","endpoint":{"method":"POST","content_type":"application/json","body_fields":["access_token","discord_user_id","guild_id"]},"request_headers":{"x_timestamp":"Unix epoch seconds string (for freshness checks)","x_signature":"HMAC-SHA256 hex digest of raw request body using guild verify secret","x_signature_note":"Header is omitted when no verify secret is configured. Rotate/generate secret in dashboard Integrations tab."},"response_body":{"access":true,"reason":"optional_reason_string"},"policy_controls":{"verify_fail_mode":"fail_closed","verify_timeout_ms":5000,"verify_cache_ttl_seconds":300},"examples":{"request":{"access_token":"license_token_abc123","discord_user_id":"353750360151687169","guild_id":"1465828371576393784"},"allow_response":{"access":true,"reason":"license_active"},"deny_response":{"access":false,"reason":"license_missing_or_expired"}},"notes":["Verification is enabled whenever verify_endpoint is configured for a server.","Owners should keep verify services idempotent and low-latency.","Use fail_closed for strict entitlement gating; fail_open only for resilience-first behavior."]},"count":1,"meta":{"request_id":"req_def6654d1a18db2799ed3ac9"}}