Sign in
Trust Registry

Enable or disable a trusted issuer (disabled fails the trust gate but keeps the entry).

Enable or disable a trusted issuer. A disabled issuer stays in the registry but fails the trust gate during credential verification.

patch/v1/trusted-issuers/{uuid}

Path parameters

uuidstring uuid required

UUID of the trusted issuer registry entry to update.

Request body

statusstring required

You set the updated trust-gate status for this issuer.

Example request

{
  "status": "disabled"
}

Response

The trusted issuer status was updated.

idstring uuid

You receive the UUID for the trusted issuer registry entry.

namestring

You receive the trusted issuer display name.

issstring uri

You receive the issuer identifier that credentials must match.

trust_anchorstring

You receive the signing-key anchor type. https-jwks resolves through a JSON Web Key Set (JWKS) endpoint when one is configured.

jwks_uristring

You receive the JSON Web Key Set (JWKS) endpoint. The captured value is an empty string when the registry entry does not store one.

didstring

You receive the decentralized identifier for the issuer. The captured value is an empty string when the registry entry does not store one.

statusstring

You receive the updated trust-gate status for this issuer.

added_bystring

You receive the principal that registered this trusted issuer.

frameworkstring nullable

You receive the associated framework slug, or null when the issuer is not tied to one.

created_atstring date-time

You receive the timestamp when this trusted issuer was registered.

Example response

{
  "id": "18d3239a-4a0e-412b-9487-17ce7dc3bb8e",
  "name": "Gov PID Issuer",
  "iss": "http://localhost:8011/v1/issuers/docs-external-issuer-9r79lx",
  "trust_anchor": "https-jwks",
  "status": "disabled",
  "added_by": "TenantPrincipal<docs-capture-6clew6:owner>",
  "framework": "acme-partner-framework-ypr5",
  "created_at": "2026-07-02T23:33:35.153496+00:00"
}

Changes