Identity

Enroll an agent public key

Enrolls a P-256 (secp256r1) public key so the agent can sign in with an ES256 assertion instead of an API key. Accepts a JWK object, a JWK string, or a PEM. A JWK carrying a private component (d) or a key on any other curve is rejected. The same key cannot be enrolled on two inboxes. SDK: identity.enroll_key / identity.enrollKey.

post/v1/inboxes/{inbox_id}/identity/keys

Request

  • Base URL: https://api.deadsimple.email
  • URL: https://api.deadsimple.email/v1/inboxes/{inbox_id}/identity/keys
  • Auth: HTTP bearer

Path parameters

inbox_idstring required

Request body

namestring

Label, for example "worker-7".

Response

Key enrolled. Use kid in the assertion's JWS header.

kidstring

RFC 7638 thumbprint prefix. Put it in the assertion's JWS header.

inbox_idstring
emailstring
namestring
jwkobject

The enrolled P-256 public key (kty EC, crv P-256, x, y, kid).

created_atstring date-time
last_used_atstring date-time nullable

Changes

No recorded changes to this operation across all 1 revision of this API.