spare
Get started
Documentation: stellar.toml verification

Documentation

stellar.toml verification

Spare only works with domain-verified foundations. Verification uses a Stellar standard, SEP-1, so nobody approves a foundation by hand.

How a foundation verifies

The foundation registers its account in the Spare registry contract and lists the same account in the ACCOUNTS field of its website's stellar.toml (SEP-1).

ACCOUNTS=["G..."]   # the foundation account registered in the Spare registry

What Spare checks

  • The stellar.toml is fetched over https only.
  • No redirects are followed.
  • The request has a 5 second timeout.
  • The body is capped at 100 KB (checked on Content-Length and while streaming).
  • The foundation account must appear in ACCOUNTS. SDK, indexer and dashboard each re-check it.

What “domain-verified” means

It means exactly that: the account is listed on that website's stellar.toml. It is not an endorsement, a vetting of the charity or a guarantee about how the foundation uses the funds.