---
title: "Get Csca Certificates"
method: GET
path: "/api/v1/sdk/csca-certificates"
tags: ["sdk"]
---

# Get Csca Certificates

`GET /api/v1/sdk/csca-certificates`

## Request

- Base URL: `https://api.withverifa.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.withverifa.com/api/v1/sdk/csca-certificates`
- Auth: none declared

Return the CSCA certificate bundle for NFC passive authentication.

The mobile SDK uses these root certificates (published by ICAO) to verify
the Document Signer Certificate chain on a passport's chip.

**Status: not yet implemented.** Bundling and serving the ICAO master
list is a planned phase-2 task; until then this endpoint stays online
and session-gated so the SDK can wire its NFC flow without 404s, but it
returns an empty bundle and a ``not_implemented`` status flag the SDK
can branch on.

## Query parameters

- `token` string, required: Capture session token

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/withverifa/apis/verifa.md) · [All operations](https://skmtc.dev/withverifa/apis/verifa/llms.txt) · [OpenAPI document](https://skmtc.dev/withverifa/apis/verifa/revisions/7288c82c9e33?raw)