---
title: "Did Document"
method: GET
path: "/.well-known/did.json"
tags: ["bluesky-feed"]
---

# Did Document

`GET /.well-known/did.json`

## Request

- Base URL: `https://agentavow.com` (the document declares no server; this is the origin it was published from)
- URL: `https://agentavow.com/.well-known/did.json`
- Auth: none declared

Serve the DID document for the requested host.

Host-aware: ``agentavow.com`` serves ``did:web:agentavow.com``; any other
host serves ``did:web:<settings.domain>`` (``did:web:agentgraph.co``), which
also carries the Bluesky feed-generator service entry, the Ed25519
verification key used to sign AgentGraph attestations (JWS, CTEF outer
envelope), and the ``#gateway-reverify`` service endpoint referenced as
``aud`` in CTEF envelopes.

Both documents publish the SAME Ed25519 key, served byte-identical at
``/.well-known/jwks.json``, so ``did:web:<either>#agentgraph-security-v1``
resolves for verifiers. When ``CATALOG_SIGNING_KEY_P256`` is configured,
both also publish the ES256 catalog key as ``#catalog-es256-v1`` under
``assertionMethod`` only.

## Response `200`

Successful Response

- unknown

---

[API](https://skmtc.dev/agentavow/apis/agentavow-api.md) · [All operations](https://skmtc.dev/agentavow/apis/agentavow-api/llms.txt) · [OpenAPI document](https://skmtc.dev/agentavow/apis/agentavow-api/revisions/e1e20476dbfc?raw)