---
title: "Upload notation certificates for verifying signatures"
method: POST
path: "/v2/_zot/ext/notation"
---

# Upload notation certificates for verifying signatures

`POST /v2/_zot/ext/notation`

## Request

- The document declares no server URL.
- Auth: none declared
- TypeScript: <https://skmtc.dev/project-zot/apis/open-container-initiative-distribution-specification/docs/v2/_zot/ext/notation/post.ts> (a function with typed inputs; its response is checked against the schema)

Upload notation certificates for verifying signatures

## Query parameters

- `truststoreType` string

## Request body `application/octet-stream`

- string

## Response `200`

ok

- string

## Other responses

- `400`: bad request
- `413`: request entity too large
- `500`: internal server error

## Changes

- **2026-04-26** `bf1094101156`: 1 info
  - added the non-success response with the status `413`
- **2023-09-08** `a8f3a45945db`: 1 warning
  - deleted the `query` request parameter `truststoreName`
- **2023-08-02** `f5f56e05d59d`: 1 info
  - endpoint added
- **2021-10-21** `81b68c5e4fde`: 1 breaking
  - api path removed without deprecation

[Operation history](https://skmtc.dev/project-zot/apis/open-container-initiative-distribution-specification/changes/v2/_zot/ext/notation/post.md)

---

[API](https://skmtc.dev/project-zot/apis/open-container-initiative-distribution-specification.md) - [All operations](https://skmtc.dev/project-zot/apis/open-container-initiative-distribution-specification/llms.txt) - [OpenAPI document](https://skmtc.dev/project-zot/apis/open-container-initiative-distribution-specification/revisions/7937343ee83f?raw)