Issuer Directory API Reference

Operations

GET /api/v1/buildinfo

API alias for /buildinfo.json (same payload).

Responses:

GET /buildinfo.json

Image build provenance (module, gitSha, gitCommitTime, imageBuiltAt, branch) for drift detection.

Responses:

GET /issuer-directory/issuers

Lists all issuers registered in the directory for the tenant, with an option to include globally shared issuers. Returns an array of issuer records.

Parameters:

Responses:

POST /issuer-directory/issuers

Registers a new issuer in the directory with the provided ID, display name, slug, contact details, and discovery endpoints. Returns 201 Created with the new issuer record.

Responses:

GET /issuer-directory/issuers/{id}

Returns the full issuer record for a specific issuer ID including metadata, contact information, discovery endpoints, and tags. Returns 404 if not found.

Parameters:

Responses:

PUT /issuer-directory/issuers/{id}

Replaces the mutable fields of an existing issuer record. The route ID must match the body ID. Returns 200 with the updated record.

Parameters:

Responses:

DELETE /issuer-directory/issuers/{id}

Permanently removes an issuer and all associated keys and trust records from the directory. Requires Admin authorization. Returns 204 No Content.

Parameters:

Responses:

GET /issuer-directory/issuers/{issuerId}/keys

Lists all cryptographic keys registered for the specified issuer, optionally including globally shared keys. Returns an array of key records with type, format, and expiry.

Parameters:

Responses:

POST /issuer-directory/issuers/{issuerId}/keys

Adds a new cryptographic key to the specified issuer. Supported key types include Ed25519PublicKey, X509Certificate, and DssePublicKey. Returns 201 Created with the new key record.

Parameters:

Responses:

DELETE /issuer-directory/issuers/{issuerId}/keys/{keyId}

Permanently revokes a cryptographic key from the issuer directory. Requires Admin authorization. Returns 204 No Content.

Parameters:

Responses:

POST /issuer-directory/issuers/{issuerId}/keys/{keyId}/rotate

Replaces an existing issuer key with a new key of the specified type and material, retiring the previous key. Returns 200 with the updated key record.

Parameters:

Responses:

GET /issuer-directory/issuers/{issuerId}/trust

Returns the current trust configuration for the specified issuer including weight, effective trust factors, and any inherited global trust settings.

Parameters:

Responses:

PUT /issuer-directory/issuers/{issuerId}/trust

Creates or updates the trust weight assigned to an issuer for use in VEX consensus calculations. Returns 200 with the updated trust view including effective weight.

Parameters:

Responses:

DELETE /issuer-directory/issuers/{issuerId}/trust

Removes the tenant-specific trust override for the specified issuer, reverting to global defaults if present. Requires Admin authorization. Returns 204 No Content.

Parameters:

Responses: