Sign in
Trust Registry

Validate a trusted issuer

Re-check that a registered trusted issuer is reachable and its trust anchor resolves. Returns the full trusted issuer object plus a validation block summarizing the check. Scoped to the caller's tenant — a UUID belonging to a different tenant returns 404.

post/v1/trusted-issuers/{uuid}/validate

Path parameters

uuidstring uuid required

UUID of the trusted issuer to validate.

Response

The trusted issuer object with an appended validation block describing the re-check result.

idstring uuid

UUID of the trusted issuer registry entry.

namestring

Display name of the trusted issuer.

issstring

The HTTPS iss identifier of the issuer.

trust_anchor'https-jwks' | 'did-web' | 'x509'

How the issuer's signing key is anchored and resolved.

jwks_uristring

JWKS endpoint for the issuer's public keys; empty string when not set.

didstring

Issuer DID; empty string when not set.

status'active' | 'revoked'

Trust status of the issuer.

added_bystring

Identifier of the API principal that registered this trusted issuer.

frameworkstring

Slug of the associated trust framework, or null if none.

created_atstring date-time

ISO 8601 timestamp when the trusted issuer was registered.

Example response

{
  "id": "0a1b2c3d-4e5f-6071-8293-a4b5c6d7e8f9",
  "name": "Gov PID",
  "iss": "https://pid.gov.example",
  "trust_anchor": "https-jwks",
  "jwks_uri": "https://pid.gov.example/.well-known/jwks.json",
  "status": "active",
  "added_by": "tenant:state-university",
  "framework": "eidas2",
  "created_at": "2026-06-29T12:34:56.789012+00:00",
  "validation": {
    "reachable": true,
    "anchor_ok": true,
    "status": "active"
  }
}

Changes