Sign in
Trust Registry

Add a trusted issuer

Register an issuer this tenant will trust when verifying credentials. After registration, credentials whose iss matches an active trusted issuer pass the verification trust gate. The new entry is always created with status active and added_by set to the calling API principal. Scoped to the caller's tenant via the API key.

post/v1/trusted-issuers

Request body

namestring required

Display name for the trusted issuer.

issstring required

The HTTPS iss identifier of the issuer to trust. Must be unique within the tenant.

trust_anchor'https-jwks' | 'did-web' | 'x509'

How the issuer's signing key is anchored. Defaults to https-jwks when omitted.

jwks_uristring

JWKS endpoint used to fetch the issuer's public keys. Provide when trust_anchor is https-jwks.

didstring

Decentralized identifier of the issuer. Provide when trust_anchor is did-web.

frameworkstring

Trust framework slug (from GET /v1/trust-frameworks) to associate with this issuer (e.g. eidas2). Resolved to a framework if it exists; ignored if no match is found.

Example request

{
  "name": "Gov PID",
  "iss": "https://pid.gov.example",
  "trust_anchor": "https-jwks",
  "jwks_uri": "https://pid.gov.example/.well-known/jwks.json",
  "did": "did:web:pid.gov.example",
  "framework": "eidas2"
}

Response

No response body

Changes