---
title: "Burn one Session/Workday slot → Ed25519 PASS"
method: POST
path: "/v1/session/cert"
tags: ["session", "workday", "abmp", "authorize"]
---

# Burn one Session/Workday slot → Ed25519 PASS

`POST /v1/session/cert`

## Request

- Base URL: `https://sqlguard.io`
- URL: `https://sqlguard.io/v1/session/cert`
- Auth: none required

Requires X-SQLGuard-Session (from Workday or Session settle). No additional Exact. Returns Ed25519 certificate+signature. Then POST /v1/verify.

## Response `200`

PASS certificate

## Other responses

- `402`: session empty/expired — reopen POST /v1/workday (job) or /v1/session (burst)
- `422`: FAIL certificate (slot still burned)

---

[API](https://skmtc.dev/sqlguard/apis/sqlguard-permission-before-production-writes.md) · [All operations](https://skmtc.dev/sqlguard/apis/sqlguard-permission-before-production-writes/llms.txt) · [OpenAPI document](https://skmtc.dev/sqlguard/apis/sqlguard-permission-before-production-writes/revisions/d164204b4aea?raw)