DPP

Get self-hosted DID Web configuration

Returns the tenant-configured did:web domain and the DID Document to publish at https://{domain}/.well-known/did.json. The document is derived from the active certification key — regenerate it after every rotation.

get/v1/dpp/certification-key/did-web-config

Request

Base URL: https://api.prod.keyban.io
URL: https://api.prod.keyban.io/v1/dpp/certification-key/did-web-config
Auth: X-Api-Key (a scheme the document does not define)

Response

domainstring nullable required

Currently configured did:web domain, or null if self-hosted DID Web is disabled for this tenant.

Example response

{
  "domain": "brand.example.com",
  "didDocument": {
    "@context": [
      "https://www.w3.org/ns/did/v1",
      "https://w3id.org/security/suites/jws-2020/v1"
    ],
    "id": "did:web:brand.example.com",
    "verificationMethod": [
      {
        "id": "did:web:brand.example.com#key-1",
        "type": "JsonWebKey2020",
        "controller": "did:web:brand.example.com",
        "publicKeyJwk": {
          "kty": "EC",
          "crv": "P-256",
          "x": "f83OJ3D2xF1Bg8vub9tLe1gHMzV76e8Tus9uPHvRVEU",
          "y": "x_FEzRu9m36HLN_tue659LNpXW6pCyStikYjKIWI5a0"
        }
      }
    ],
    "assertionMethod": [
      "did:web:brand.example.com#key-1"
    ],
    "authentication": [
      "did:web:brand.example.com#key-1"
    ]
  },
  "lastCheck": {
    "at": "2026-06-10T14:30:00.000Z",
    "status": "ok",
    "reason": "key_mismatch"
  }
}

Changes

No recorded changes to this operation across all 1 revision of this API.