A rights receipt for an asset at a public URL: Rightshold fetches the asset's bytes once, hashes them, and records the license signals those bytes carry — SPDX-License-Identifier markers, named license texts, and copyright lines — on a public receipt sealed to the ledger. Anyone can re-fetch the URL, re-hash the bytes and check the receipt against them.
A receipt records signals; it asserts no license and no verdict. Signals found do not grant any use, and no signals found does not mean an asset is unlicensed — it means only that these bytes carried none of the listed signals when fetched. Whether a use is permitted is a license question: check_license answers those.
curl -s "https://www.rightshold.com/v1/asset-rights"That index names the issue form: POST /v1/asset-rights with a JSON body naming the asset's public url — one call fetches the bytes, records their signals and seals the receipt.
| Asset | Receipts | Versions | Latest finding | SHA-256 |
|---|---|---|---|---|
| anthropics/skills | 1 | 1 | no license signals found in the bytes | 8017469ea95fb7d2… |
Machine-readable: GET /v1/asset-rights · the account Rights Receipt (a use cleared, with a verdict) is a different instrument: rights-receipt/1.