Agent Docs

Read a public key used to verify sandbox signatures.

Key lookup does not establish that a receipt is current, reviewed or allowed for a decision. Verify the signature and its recorded scope separately.

Inputs. Path, query and header fields are listed below. No request body is required.

Outputs. See each status below for its media type, schema and headers. A missing record or unavailable capability is not a successful empty result.

Errors. API JSON failures use the documented response schema. Read code, message and next; retry only when the response allows it. Auth, invalid input and missing records need a caller change.

Rate limits. Public read budgets apply by client IP and route group. This operation can have a smaller route-specific budget. Read Retry-After on 429 or retryable 503 responses.

Example setup. Use an identifier returned by the matching list, search or create operation. Sample identifiers are not a promise that a record exists.

get/api/keys/sandbox/{purpose}/{keyId}

Request

  • Base URL: https://huggingbay.xyz
  • URL: https://huggingbay.xyz/api/keys/sandbox/{purpose}/{keyId}
  • Auth: none required

Path parameters

purpose'runner-attestation' | 'receipt-signing' required

Signing role.

keyIdstring required

Key identifier from the signed receipt or attestation.

Response

Read a public key used to verify sandbox signatures.

schema'hugging-bay.sandbox-signing-public-key.v1' required
rolestring required
key_idstring required
originstring required
public_key_urlstring required
algorithmstring required
public_key_pemstring required
statusstring required

Changes

No recorded changes to this operation across all 2 revisions of this API.