---
title: "Sign Bundle"
method: POST
path: "/agent-skills/{skill_id}/{version}/sign"
---

# Sign Bundle

`POST /agent-skills/{skill_id}/{version}/sign`

## Request

- Base URL: `https://api-docs.session-exchange.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api-docs.session-exchange.com/agent-skills/{skill_id}/{version}/sign`
- Auth: none declared

Sign a served bundle for verify-before-serve (1g). Admin-only: the collector
signs {skill_id, version, content_hash} with the GOVERNED key (never loop-
accessible) and stores the signature. 503 if no key is configured.

## Path parameters

- `skill_id` string, required
- `version` string, required

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/session-exchange/apis/a4sx.md) · [All operations](https://skmtc.dev/session-exchange/apis/a4sx/llms.txt) · [OpenAPI document](https://skmtc.dev/session-exchange/apis/a4sx/revisions/abaefc33dfc7?raw)