---
title: "sign an HREF in the format of a URL and returns a SharedAccessSignatureSignedHrefResponse"
method: GET
path: "/sas/sign"
tags: ["Shared Access Signature (SAS) Tokens for GeoCatalog Asset Access"]
---

# sign an HREF in the format of a URL and returns a SharedAccessSignatureSignedHrefResponse

`GET /sas/sign`

Signs a HREF (a link URL) by appending a [SAS Token](https://docs.microsoft.com//azure/storage/common/storage-sas-overview#how-a-shared-access-signature-works).
If the HREF is not a Azure Blob Storage HREF, then pass back the HREF unsigned.

## Query parameters

- `api-version` string, required
- `href` string, uri, required
- `duration` integer

## Response `200`

Successful Response

- SharedAccessSignatureSignedLink — Represents a link that has not been signed with a SAS token. The expiry field will be null for unsigned links.
  - `msft:expiry` string, date-time — The expiry date of the signed link. This indicates when the link will no longer be valid.
  - `href` string, uri, required — The URL of the unsigned link.

## Other responses

- `default` — An unexpected error response.

## Changes

- **2026-07-13** (2025-04-30-preview) `5ac1a8504c7f` — 2 info
  - api tag `Shared Access Signature (SAS) Tokens for GeoCatalog Asset Access` added
  - api tag `Sign an HREF for read access` removed
- **2025-05-15** (2025-04-30-preview) `00cbc3d6d8e0` — 2 info
  - api tag `Sign an HREF for read access` added
  - api tag `Shared Access Signature (SAS) Tokens for GeoCatalog Asset Access` removed

[Change history](https://skmtc.dev/azure/apis/orbital-microsoft-planetarycomputer/changes/sas/sign/get.md)

---

[API](https://skmtc.dev/azure/apis/orbital-microsoft-planetarycomputer.md) · [All operations](https://skmtc.dev/azure/apis/orbital-microsoft-planetarycomputer/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/azure/orbital-microsoft-planetarycomputer/revisions/42447be18bc5/schema)