---
title: "List trusted issuers"
method: GET
path: "/v1/trusted-issuers"
tags: ["Trust Registry"]
---

# List trusted issuers

`GET /v1/trusted-issuers`

List the issuers this tenant trusts when verifying presented credentials. Didit ID rejects credentials whose `iss` value does not match an active trusted issuer. The response is a bare JSON array ordered by most recent creation time.

## Response `200`

A bare JSON array of trusted issuer objects for the caller's tenant.

- object[]
  - `added_by` string — You receive the principal that registered this trusted issuer.
  - `created_at` string, date-time — You receive the timestamp when this trusted issuer was registered.
  - `did` string — You receive the decentralized identifier for the issuer. The captured value is an empty string when the registry entry does not store one.
  - `framework` string — You receive the associated framework slug, or null when the issuer is not tied to one.
  - `id` string, uuid — You receive the UUID for this trusted issuer registry entry.
  - `iss` string, uri — You receive the issuer identifier that credentials must match.
  - `jwks_uri` string — You receive the JSON Web Key Set (JWKS) endpoint. The captured value is an empty string when the registry entry does not store one.
  - `name` string — You receive the trusted issuer display name.
  - `status` string — You receive the trust-gate status for this issuer.
  - `trust_anchor` string — You receive the signing-key anchor type. `https-jwks` resolves through a JSON Web Key Set (JWKS) endpoint when one is configured.
  - `validation_state` string — You receive the trust-anchor validation state: `unverified`, `verified`, or `failed`.
  - `last_validated_at` string, date-time, nullable — You receive the timestamp of the most recent validation run, or null when the issuer has never been validated.

## Changes

- **2026-07-05** `e4eddba66557` — 2 info
  - added the optional property `items/last_validated_at` to the response with the `200` status
  - added the optional property `items/validation_state` to the response with the `200` status
- **2026-07-03** `9addd64b04b1` — 1 breaking, 1 warning
  - the response's body type/format changed from `object`/`` to `array`/`` for status `200`
  - removed the optional property `items` from the response with the `200` status
- **2026-06-30** `1ee4908e9af4` — 1 info
  - added the media type `application/json` for the response with the status `200`

[Change history](https://skmtc.dev/didit-protocol/apis/didit-credentials-api/changes/v1/trusted-issuers/get.md)

---

[API](https://skmtc.dev/didit-protocol/apis/didit-credentials-api.md) · [All operations](https://skmtc.dev/didit-protocol/apis/didit-credentials-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/didit-protocol/didit-credentials-api/revisions/e4eddba66557/schema)