---
title: "Set the timestamp authority"
method: PATCH
path: "/settings/signing"
tags: ["envelope"]
---

# Set the timestamp authority

`PATCH /settings/signing`

## Request

- Base URL: `https://localhost:4410/api/v1`
- URL: `https://localhost:4410/api/v1/settings/signing`
- Auth: HTTP bearer

The RFC 3161 timestamp authority this workspace's seals use; null goes back to the instance's. It must be public https.

## Request body

- object
  - `timestamp_url` string, nullable, required

## Response `200`

The result.

- object
  - `seal` object, required
    - `name` string, required
    - `self_signed` boolean, required
    - `expires_at` string, date-time, required
    - `expires_within_a_year` boolean, required
    - `acrobat` string, required
  - `steps` string[], required
  - `key_storage` object, required
    - `kind` 'file' | 'hsm', required
    - `rating` 'lower' | 'good', required
    - `why` string, required
  - `timestamp` object, required
    - `url` string, nullable, required
    - `source` 'workspace' | 'instance' | 'test', required
    - `tested_at` string, date-time, nullable, required
    - `error` string, nullable, required
  - `sending_blocked` string, nullable, required

## Other responses

- `202`: Called by an agent or an API key, so the call did not run. A person approves it at approval_url; then GET the Location.
- `default`: An RFC 9457 problem.

---

[API](https://skmtc.dev/binderwork/apis/binderwork-api.md) · [All operations](https://skmtc.dev/binderwork/apis/binderwork-api/llms.txt) · [OpenAPI document](https://skmtc.dev/binderwork/apis/binderwork-api/revisions/f8fab0ebee53?raw)