---
title: "Http Message Signatures Directory"
method: GET
path: "/.well-known/http-message-signatures-directory"
---

# Http Message Signatures Directory

`GET /.well-known/http-message-signatures-directory`

## Request

- Base URL: `https://www.oxfordledge.com` (the document declares no server; this is the origin it was published from)
- URL: `https://www.oxfordledge.com/.well-known/http-message-signatures-directory`
- Auth: none declared

Web Bot Auth key directory — the JWKS receiving sites use to verify
HTTP Message Signatures (RFC 9421) on requests our crawlers send.
Content-Type per draft-meunier-web-bot-auth-architecture. Phase 2 adds
the directory response self-signature (Signature/Signature-Input with
tag="http-message-signatures-directory"), which needs the private key
in env.

## Response `200`

Successful Response

- unknown

---

[API](https://skmtc.dev/oxfordledge/apis/oxford-ledge-api.md) · [All operations](https://skmtc.dev/oxfordledge/apis/oxford-ledge-api/llms.txt) · [OpenAPI document](https://skmtc.dev/oxfordledge/apis/oxford-ledge-api/revisions/e832a1260f0b?raw)