---
title: "List Trust Anchors [EXPERIMENTAL]"
method: GET
path: "/trustAnchors"
tags: ["Trust Anchors"]
---

# List Trust Anchors \[EXPERIMENTAL\]

`GET /trustAnchors`

## Request

- Base URL: `https://eu-west-1.api.silverflow.com/v1`
- URL: `https://eu-west-1.api.silverflow.com/v1/trustAnchors`
- Auth: one of:
  - HTTP basic
  - HTTP bearer
- TypeScript: <https://skmtc.dev/silverflow/apis/silverflow-api/docs/trustAnchors/get.ts> (a function with typed inputs; its response is checked against the schema)

This operation returns a paged list of the Agent's Trust Anchors: the CA certificates trusted for mTLS
authentication. Active Trust Anchors are returned unless `archived` is set to true.

Requires `trustAnchors:List` permission.

## Query parameters

- `archived` boolean
- `sortOrder` 'asc' | 'desc'
- `limit` integer
- `offsetToken` string

## Response `200`

A paged list of Trust Anchors

- TrustAnchorsPage
  - `offsetToken` string
  - `moreItems` boolean
  - `trustAnchors` TrustAnchor[], required
    - `key` string, required
    - `agentKey` string, required: Uniquely identifies an Agent
    - `fingerprint` string, required: The SHA-256 hash of the DER-encoded certificate, as URL-safe base64 with padding (44 characters, using `-` and `_`, ending in `=`). This is the value of the `CloudFront-Viewer-Cert-Sha256` header for the certificate. To compute it from a certificate file: `openssl x509 -in cert.pem -outform der | openssl dgst -sha256 -binary | openssl base64 -A | tr '+/' '-_'`.
    - `status` 'active' | 'archived', required: The status of the Trust Anchor
    - `description` string
    - `notBefore` string, date-time, required: The start of the certificate's validity period, taken from the certificate
    - `notAfter` string, date-time, required: The end of the certificate's validity period, taken from the certificate
    - `created` string, date-time, required: The date and time this object was created
    - `lastModified` string, date-time: The date and time this object was last modified
    - `version` integer, required: The version of this object

## Other responses

- `400`: The request was malformed. See the response body for details
- `401`: Authentication information is missing or invalid
- `403`: The authenticated client is forbidden to make the request for the resource identified.
- `404`: The requested resource was not found
- `429`: The number of requests (per minute) has exceeded the configured maximum

---

[API](https://skmtc.dev/silverflow/apis/silverflow-api.md) - [All operations](https://skmtc.dev/silverflow/apis/silverflow-api/llms.txt) - [OpenAPI document](https://skmtc.dev/silverflow/apis/silverflow-api/revisions/43ecbe4fd6ea?raw)