Signup By Signature

Mint an API key by proving key possession instead of owning a mailbox.

An agent that registered through /identity/register-pop already holds an Ed25519 key the server knows. Requiring an email on top of that asks for a human and a mailbox to stand behind something that is not about either — and every mailbox-shaped identity is one more thing to Sybil.

Same challenge, same proof-of-work, same signature check as keyless registration. The key is bound to the DID that owns the public key, so it cannot be minted for an agent the caller does not control.

post/auth/signup-did

Request

  • Base URL: https://api.moltrust.ch (the document declares no server; this is the origin it was published from)
  • URL: https://api.moltrust.ch/auth/signup-did
  • Auth: none declared

Request body

public_keystring required

Ed25519 public key as 64 lowercase hex characters (32 bytes), the same key the DID was registered with.

challengestring required
signaturestring required
pow_noncestring required

Example request

{
  "public_key": "469c5b9f3a3cf1295cd33bddbcb40fc03ad8e163f443218fac4fadf0951ee65f"
}

Response

Successful Response

unknown required

Changes

No recorded changes to this operation across all 1 revision of this API.